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The  Most  Prestigious  Awards  Program  Honoring  Innovative  IT  Solutions 


Enterprise  Value  Awards 


SM 


THE  PRESSURE  AMONG  IT  executives  to  prove  the  value  of  IT  has  never  been  greater.  Top  man¬ 
agement  closely  scrutinizes  the  bottom  line  to  determine  whether  IT  is  providing  a  profitable 
return  on  investment.  That  trend  has  motivated  many  IT  executives  to  develop  methods  for  measuring 
both  the  hard  and  soft  benefits  derived  from  information  technology. 


THAT  SEARCH  FOR  technology’s  ROI  in  turn  prompted  the 
editors  of  CIO  Magazine  to  create  the  Enterprise  Value 
Awards.  By  honoring  the  strategists  who  have  implemented 
innovative,  value-rich  IT  solutions,  we  at  CIO  hope  to  inspire 
others  in  their  search  for  enterprise  value.  This  year,  we  are 
proud  to  announce  that  AT&T  Solutions  is  underwriting  this 
awards  program,  as  it  too,  recognizes  the  need  to  honor  strate¬ 
gically  crafted  IT  solutions. 

DO  YOU  QUALIFY  FOR  AN  ENTERPRISE  VALUE  AWARD? 
Four  criteria  are  essential: 

1 .  A  return  of  value  to  the  enterprise 

2.  A  measurable  financial  return  attributable  to 
the  system 

3.  The  pervasiveness  of  information  technology  — 
in  other  words,  the  strategic  objective  could  not 
have  been  met  without  IT’s  contribution 

4.  A  collaboration  between  an  IT  and  business 
executive 


WHAT  EXACTLY  DO  WE  MEAN  BY  VALUE? 

These  days,  value  is  often  synonymous  with  return-on-invest  - 

ment  (ROI).  And  while  ROI  will  certainly  be  a  key  factor  for 

determining  CIO  Enterprise  Value  Award  recipients,  value 

can  also  be  obtained  with  systems  that  enable: 

•  new,  innovative  and  more  productive  ways 
of  doing  business 

•  revamped  organizational  structures 
or  styles  of  performing  the  work  of 
the  enterprise 

•  new  market  entry  or  penetration 

•  global  expansion 

•  transformation  of  the  way  the 
enterprise  competes  within  its 
customary  market  or  alters  the  term 
of  competition  in  the  market 

•  improved  relationships  with 
customers 

•  enhanced  relationships  with 
employees  or  functions 

•  leaner  and  more  economical  operations 


IF  YOU’VE  DEVELOPED  a  technology  application  that  fits 
the  CIO  Enterprise  Value  Award  profile,  we  urge  you  to  fill 
out  the  application  form  bound  within  this  issue.  The  Feb. 

1 , 1 998,  issue  of  CIO  will  feature  profiles  of  the  winning 
organizations  and  the  executives  who  have  proven  IT’s 
positive  and  sustained  impact  on  the  enterprise. 


In  February  1 998,  CIO  and 
AT&T  Solutions  will  host  a 
ceremony  honoring  the 
Enterprise  Value  Award 
winners  at  the  annual  CIO 
Enterprise  Value  Retreat. 
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SPECIAL  REPORT 

On  Software  Reuse 
Begins  On  Page  34 


Systems 


The  Future  Of  Software  Development  Starts  Here 


ALSO  INSIDE 

Is  The  Internet  Really 
Client/Server  Done  Right? 


AN  INTERNATIONAL  DATA  GROUP  PUBLICATION 


ELIMINATES  DIRT  ON  WALLS. 


lo  everyone  battling  with  the  barriers  between  main-  They're  the  world's  first  servers  that'll  run  your  current  mainframe 

frames  and  open  systems,  we  offer  a  potent  new  solu-  apps.  Run  your  new  open-system  apps.  Or  even  run— get  this — 

tion:  ClearPath™  servers.  OlGSrPsth  both  of  them  together  from  the  very  same  server  unit. 

The  only  family  of  servers  that  can  solve  your  servers  Suddenly,  walls  will  cease  to  separate  your  sys- 

multiple  operating  system  problems  with  no  muss,  no  fuss.  terns,  your  people  and  the  information  they  depend  on. 

Take  our  newest  brainchild,  the  ClearPath  HMP  Series.  There's  more.  In  fact,  the  ClearPath  family  ranges  from  the 


ELIMINATES  WALLS. 


largest  enterprise  systems  to  the  smallest  open  servers. 
There's  the  enterprise-class  2200  Series.  The  highly  scal¬ 
able  SMP  Series.  Plus  the  object  code-compatible  A  Series. 

Sufficient  evidence  to  prove  that  now  nothing  should 
come  between  where  you  are  and  where  you  want  to  go. 
http://www.unisys.com  or  1-800-874-8647,  ext.  230. 


UNISYS 

When  information  is  everything. 


©1996  Unisys  Corporation.  ClearPath  is  a  trademark  of  Unisys  Corporation. 
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INTRODUCTION 

34  More  Lives  Than  a  Cat 

IS  shops  that  institute  component-based  software  development 
reduce  failure,  embrace  efficiency  and  augment  the  bottom  line. 
You’d  think  it  would  be  easier  to  persuade  people  to  try  it. 

CULTURAL  ISSUES 

38  Avoiding  the  Point  of  No  Reuse 

CIOs  who’ve  been  there  say  reaping  the  benefits  of  software 
reuse  hinges  on  overcoming  a  bevy  of  cultural  barriers. 


TECHNOLOGY 


56  Bits  and  Pieces 


Different  kinds  of  component-based  develop¬ 
ment  still  require  the  same  technology. 


FEATURE 


INTERVIEW:  BILL  HANCOCK 

68  To  Catch  a  Thief... 

Security  veteran  Bill  Hancock  helps 
CIOs  safeguard  company  secrets 
by  finding  loopholes  in  networks, 
firewalls  and  building  security. 
By  Jennifer  Bresnahan 
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pensation,  Managing  IT  Standards 

■  Next  CIO  Conference  “Leading  the  Charge  in 
Turbulent  Environments”  at  the  Sheraton 
San  Diego  Hotel  &  Marina,  San  Diego, 
March  23-26 
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You  Can  Do  Many  Things  Modestly, .'!  |7*  \ 

OR  ONE  THING  MAGNIFICENTLY. 
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Human  Resources  is,  and  always  has  been,  the  focus  of  Spectrum's  entire  corporation.  While  the  other  guys 
were  performing  for  the  masses,  we've  been  fine-tuning  the  HR  functionality  that  today's  HR  professionals  require. 

At  Spectrum,  the  sale  is  just  the  beginning  of  a  long-term  partnership  with  our  clients.  We  follow 
through  with  full-service  conversion,  implementation,  training,  and  technical  support  services  from  a 

staff  of  experienced  IS  and  HR  professionals. 

And  because  Spectrum's  HR  systems  are  built  upon  Microsoft's  leading,  industry-standard 
technology,  you  get  the  power  to  manage  today's  challenges,  and  the  flexibility'  to  build  for  tomorrow's. 

In  today's  business  world,  that's  something  of  note. 


Call  800  477-3287  For  Free  Software  Demo  Disk 

SPECTRUM  Human  Resource  Systems  Corporation  1625  Broadway,  Suite  2600  Denver,  CO  80202 


Microsoft 


SOLUTION  PROVIDER 


SPECTRUM 

Human  Resource  Systems  Corporation 


Will  the  warranty  expire 
on  the  truck  ride  over? 


Just  How  Worried  Are 
You  About  Choosing 
the  Right  Business  PC? 


Picking  a  PC  for  your  company  raises  a  lot 
of  questions.  Questions  that  we  can  answer. 


To  see  why  HP  PCs  make  good  business 
sense,  call  us  at  800-322-HPPC,  Ext.  1880* 
Or  visit  http://www.hp.com/go/vectra. 


HP 


PCs 


M  v- 


FROM 


Pentium 

l*nOCI»«OM 


•In  Canada.  caN  1-800-387-3867  ’Starting  U  S  street  pnce  for  HP  Vectra  VE3.  Monitor  not  included  The  Intel  Inside  logo  and  Pentium  are  registered  trademarks  of  Intel  Corporation.  ©1996  Hewlett-Packard  Company  PPG431 


Will  they  be  outdated 
before  the  cheek  cleat's? 


Will  you  need  to  issue  nen 
stock  to  afford  them? 


Will  they  decide 
to  quit  right 
on  the  spot? 


Whp 1  HEWLETT 
mLUM  PACKARD 


GARTNER  VIEW 

28  Once  Is  Not  Enough 

Embarking  on  a  reuse  program  requires  more  than 
simply  announcing  the  program’s  existence. 

By  Richard  Hunter 
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EMERGING  TECHNOLOGY 

Beyond  Client/Server 

Are  Web-based  applications 
“client/server  done  right”? 

By  Curtis  R  Franklin  Jr. 

■  Smart  cards 

■  Automated  voice  services,  rugged  notebook 
computers,  seamless  communications 


New  On  Our  Web  Site 

cio.com 

http://www.cio.com 


LEARN  MORE  ABOUT 
SOFTWARE  REUSE 

When  you’re  finished  reading  through  our 
special  report,  surf  on  over  to  our  related 
Resource  Center  for  additional  information. 
You’ll  find  links  to  component  sources, 
papers  on  the  subject,  and  recommended 
books  and  resources. 
www.cio.comlClOlrc_cbd.html 


GET  CONNECTED 

Visit  the  new  CIO  Connection,  a  general 
forum  about  life  on  the  front  lines  of  IT. 
Share  your  questions  and  answers,  and 
trials  and  triumphs  with  our  staff 
and  your  peers. 


Enterprise  Value  Awards 
application  follows 
Page  26. 


www.cio.comlforumslcio.html 
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WORKING  SMART 

Clawson  Concrete's 
Fleet-Tracking  System 

Streamlining  the  dispatch  process 
increased  delivery  rates  and  accuracy 
and  improved  customer  service. 

By  Derek  Slater 


Board  Chairman 

Patrick  J.  McGovern 

President 

Kelly  Conlin 

Chief  Operating  Officer 

James  Casella 

Executive  Vice  President 

William  P.  Murphy 


A  QUORUM  OF  FORUMS 

Three  recent  Online  Feature  Forums  are 

continuing  indefinitely  due  to  popular 
demand.  Find  out  what  people  are  saying 
about  these  issues: 

■  Electronic  commerce 

(www.cio.com/forums/ec.html) 

■  Year  2000  date  conversion 

( www.  cio.  com/forums/yearl  k.html) 

■  Webmaster's  role 

( www.  web-master,  com! forums! career,  html) 
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"Only  Oracle  Applications  provide 
the  flexibility  we  need  to 
integrate  22  business  units  in 
120  locations  across  27  countries." 

Dr.  Keith  Turnbull,  Executive  Vice  President 

Alcoa 


Alcoa,  the  world’s  largest  manufacturer  of  aluminum 
and  related  products,  operates  22  independent  business 
units  spanning  27  countries.  They  needed  applications 
that  each  business  unit  could  rapidly 
adapt  while  still  sharing  common 
business  process  and  data.  Alcoa 
chose  Oracle  Applications. 

Oracle  is  the  world’s  fastest-grow¬ 
ing  supplier  of  open  business  applica¬ 
tions,  with  more  manufacturing  and  financial 
application  sites  running  than  anyone  else. 


Oracle  Applications  automate  your  entire  enterprise 
with  over  30  integrated  software  modules  for 
finance,  supply  chain  management,  manufacturing, 
project  systems,  human  resources  and 
market  management. 

Do  your  business  applications 
provide  the  flexibility  you 
need  to  manage  your  business? 
If  not,  call  Oracle  at  1-800-633-1059, 
ext.  1  1025  today.  Or  find  us  on  the  Web  at 
http://www.oracle.com/applications 


Market 

Management  Supply  Chain 
Management 


Finance 
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ORACLE* 

Enabling  the  Information  Age  ™ 


Oracle 


Applications 


©1997  Oracle  Corporation.  Oracle  is  a  registered  trademark,  and  Oracle  Applications  and  Enabling  the  Information  Age  are  trademarks  of  Oracle  Corporation.  All  rights  reserved. 

All  other  company  and  product  names  are  trademarks  of  their  respective  owners. 


In  Box 

LETTER  FROM  THE  EDITOR,  READER  FEEDBACK  AND  HOW  TO  REACH  US 


Those  of  you  who  have  been  reading  CIO  since  its  early  days  will 

no  doubt  be  as  amazed  as  I  am  that  we  are  nearing  our  10th  anniversary.  (I  sure  hope 
the  next  10  years  don’t  go  as  fast — but  they’ll  probably  go  faster.)  We’re  planning  some 
special  coverage  and  events  to  celebrate  this  milestone,  and  we  would  appreciate  your 

input  as  to  what’s  interesting  about  the  decade  gone  by, 
the  current  state  of  IT  and  the  CIO  position,  and  what  the 
future  is  likely  to  bring. 

We’d  also  like  to  know  more  about  you,  our  readers. 
What  follow  are  some  questions  we’ll  be  asking  you  in  the 
coming  months.  Simply  send  your  responses  to  me  in  an 
e-mail  {lundberg@cio.com) .  We’ll  begin  publishing  them 
either  in  the  magazine  or  on  our  Web  site  in  May  and  con¬ 
tinue  throughout  the  rest  of  the  year. 

Where  were  you  10  years  ago,  and  what  were  you 
doing?  If  you  were  at  the  same  company  as  you  are  now 
(and  especially  if  you  were  in  your  current  position), 
what’s  the  secret  to  your  longevity?  If  you  were  elsewhere,  how  many  companies  have 
you  worked  for?  How  many  jobs  have  you  held?  How  long  have  you  been  reading 


CIO ?  What’s  the  biggest  change  IT  has  made  in  your  company  in  the  last  decade? 
What  has  been  your  greatest  moment  as  an  IS  professional  in 


that  time  frame?  If  you  could  go  back  in  time  to  1987  with  the 
knowledge  you  have  today,  what  one  thing  would  you  do  dif¬ 
ferently?  Fast  forward  10  years:  Where  do  you  expect  to  be, 
and  what  will  you  be  doing? 

From  the  conversations  I’ve  had  with  CIOs  over  the  past  few 
years,  I  know  there  are  some  great  stories  out  there. 

We’d  love  to  hear  yours. 


lundberg@cio.com 


FROM  OUR  READERS 

EDI  EXCHANGES 
I  enjoyed  your  timely  article  on  EDI  and  the 
Internet  [“The  Once  and  Future  EDI,”  Dec. 
15, 1996/Jan.  1, 1997]. 

EDI’s  raison  d’etre  is  to  enable  different 
business  entities  to  have  a  vendor-  and  sys¬ 
tem-independent  way  of  communicating 
business  information  to  each  other.  The  con¬ 
sultants  who  talk  about  new  EDI  standards 
for  electronic  commerce  are  mixing  apples 
and  oranges — there’s  no  need  for  a  company 
to  put  EDI  transactions  between  its  order- 
entry  Web  screen  and  its  order-management 
system.  (But  if  the  company  has  outsourced 
the  electronic  order-entry  process,  it  may 
make  a  lot  of  sense  for  the  outsourcer  to 
send  the  results  of  the  Web-based  transac¬ 
tions  back  to  the  vendor  via  EDI!) 

Secondly,  as  sexy  as  Web  servers  and 
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From  the  beginning,  InPower  Models-  were  event-based 
creations,  rather  than  random  accidents  of  evolution. 


What  has  evolution  done  for  HR?  Ported  mainframe 
programs  to  PCs?  Required  multiple  systems  and 
duplicate  data  entries  to  hire  an  applicant?  Has 
evolution  left  you  an  ice  age  or  two  behind  the 
rest  of  your  business?  Then  consider  InPower. 


The  Ultimate  Human  Resource  Manager  prefers  creation 
to  evolution.  InPower  gives  you  the  cumulative  best  practices 
of  the  world’s  most  efficient  HR  departments -today.  We  call 
this  miracle:  InPower  Models. 

InPower  Models  define  “event-based”  procedures  for  every 
HR  activity,  from  day-to-day  operations  to  those  dependent 
on  frequently  changing  information.  You  designate  the  task, 
InPower  automates  the  procedure. 


/ 


These  models  were  derived  from  the  HR  practices  of  leading- 
edge  companies:  multinationals  and  regionals,  large  and  small, 
unionized,  even  multi-industrial.  The  results  were  streamlined 
into  InPower’s  customizable  client/server  applications.  No  hit- 
and-miss.  No  drawn-out  evolution. 

Best  of  all,  InPower  Models  are  completely  integrated  with 
the  rest  of  your  enterprise.  Is  that  Divine  or  what? 

So  why  don’t  other  HR/Payroll  systems  offer  models? 

They  just  haven’t  evolved  that  far.  For  more  information 
on  InPower  Models,  Call:  1-800-930-0165. 


HP  &  InPower  deliver  breakthrough  client/server 
payroll  performance.  Call  1-800-930-0165  for 
a  complete  benchmark  report. 


InPower 


Managing  the  realm  of  human  possibility :™ 

Phone:1-800-930-0165  Fax:1-800-695-8262  Url:  www.inpower.com  Email:  info@inpower.com 

Inftnver  Models  and  the  InPower  logo  are  trademarks  of  InPower,  Inc. 
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browsers  may  be,  Web  servers  are  just 
applications  that  run  on  the  Internet. 
The  bang  for  the  buck,  as  far  as  EDI  is 
concerned,  will  come  from  using  the 
Internet  to  set  up  VPNs  (virtual  private 
networks),  i.e.,  point-to-point  contact 
between  different  companies’  business 
systems.  That  will  enable  them  to 
exchange  data  on  a  demand  basis — 
make  a  connection,  transfer  the  data, 
then  break  the  connection.  No  fuss 
about  modem  speeds,  asynchronous  ver¬ 
sus  bisynchronous  protocols,  busy  tele¬ 
phone  lines  and  all  the  other  communi¬ 
cations  problems  that  drive  businesses 
to  use  expensive  VANs. 

The  first  major  proposed  standard 
that  will  “Internet  enable”  EDI  appeared 
recently  and  is  already  gaining  steam.  It’s 
called  PPTP,  or  Point- 
to-Point  Tunneling  Pro¬ 
tocol.  Jointly  developed 
by  Microsoft  and  U.S. 

Robotics  and  now  co¬ 
sponsored  by  Cisco, 

PPTP  lets  computer 
systems  set  up  secure, 
encrypted  connections 
between  their  systems. 

To  the  systems  in 
question,  it  looks  just 
like  one  more  com¬ 
munications  protocol. 

PPTP  is  already  run¬ 
ning  on  Windows  NT  4.0  servers  and 
workstations,  and  it  should  be  available 
on  Windows  95  PCs  early  this  year. 

Hopefully,  the  future  will  belong  less 
to  expensive  and  proprietary  applica¬ 
tions  and  more  to  VPN-enabled  stan¬ 
dard  EDI  applications.  Just  as  my  com¬ 
pany’s  current  EDI  system  dials  up 
another  company  to  exchange  data,  our 
future  systems  will  initiate  a  PPTP  link 
over  the  Internet,  transfer  the  data  and 
then  break  the  link. 

Roy  Wilsker 

Manager,  Technology  Planning 

The  Kendall  Co. 

Mansfield,  Mass. 
roy.wilsker@internetmci.com 

I  just  recently  implemented  EDI  in  our 
company  because  our  federal  govern¬ 
ment  customers  are  making  a  huge  push 
toward  EDI.  How  will  this  affect  the 
future  of  EDI,  considering  that  the  gov¬ 


ernment  is  an  enormous  customer 
base”?  Here  in  California,  California 
Multiple  Awards  Schedule  is  watching 
the  Feds  to  see  what  they  do  so  that  they 
can  model  their  EDI  accordingly.  Do  you 
think  the  Feds  and  the  states  will  push 
more  toward  the  Internet  or  stick  with 
their  current  plan  of  straight  EDI? 

Jason  Painter 
EDI  Manager 
Eskel-Porter  Co. 

West  Sacramento,  Calif. 
jpainter@eskel-porter.com 

Lynda  Radosevich’s  article  on  EDI  was 
narrowly  focused  and  largely  inaccurate. 
I  realize  that  products  and  services  in 
New  York  are  more  expensive  than  in 
other  parts  of  the  country,  but  Rado¬ 


sevich’s  statement  that  “VANs  typically 
charge  $25  to  transmit  1,000  charac¬ 
ters”  is  ludicrous.  I  don’t  know  which 
“experts”  she  consulted,  but  my  years  of 
electronic  commerce  experience  with  a 
$1.5  billion  distributor  tell  me  that  typi¬ 
cal  VAN  charges  are  about  20  cents  per 
kilo-character  (KC),  with  off-peak  and 
high-volume  discounts  bringing  that 
figure  down  by  20  percent  or  more. 
Granted,  these  rates  are  excessive  con¬ 
sidering  where  technology  is  today,  but 
they  are  highly  competitive  considering 
the  cost  of  paper  processing.  As  for  Steve 
Botts’s  statement  that  some  smaller  com¬ 
panies  using  traditional  VAN  services 
“spend  $40,000  to  $60,000  per  month 
just  sending  regular  [purchase  orders]  and 
invoices,”  if  these  numbers  are  correct, 
using  an  accurate  rate  of  20  cents  per  KC 
and  assuming  an  average  document  size 
of  2K  (the  statistical  average  for  a  sales 
order  or  invoice  at  my  company),  we’re 
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Get  in  the 

megabit  commuter  lane. 

Mail  this  prepaid  card  or  call  800-370-9670  to  receive 
more  information  on  PairGain  products. 

□  Send  me  information  on  PairGain's  Campus  area  network  solutions 

□  Send  me  PairGain's  free  technology  brief  on  HDSL 

□  Send  me  additional  information  on  other  PairGain  products 

□  Have  a  PairGain  representative  call  me 
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Company _ 
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City,  State,  Zip 

Phone _ 

Fax _ 

E-mail  Address 


(PairGain 

The  CopperOptics  Company 

http://www.pairgain.com 
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Get 
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commuter  lane. 
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and  CopperOptics,  Campus-Star,  Campus-REX  and  Megabit  Modem  are  trademarks  of  PairGain  Technologies,  Inc. 


PairGain  offers  megabit  rate 
telecommuting  and  remote  LAN 
access  over  existing  copper  wires. 

Thanks  to  telecommuting  and  remote  LAN  access, 
anyone  can  get  to  the  office  without  going  to  the 
office.  It's  a  key  to  successful  management  as  your 
company  decentralizes  and  grows.  The  challenge  is  to 
add  hot  new  data,  video  and  voice  services  cost 
effectively  and  transparently. 

That's  where  PairGain's  family  of  xDSL-based  products 
using  high-speed  Digital  Subscriber  Line  (xDSL) 
transmission  technology  comes  in. 


384  kbps-2  Mbps 


Existing  Copper 


Campus-Star 

Communications  Center 


Campus-REX 

Remote  Site 


xDSL  technology  lets  you  connect  remote  and 
home  offices  to  your  fiber  backbone  using  existing 
copper  wires.  High  bandwidth  speed  at  up  to  2  Mbps 
in  both  directions  with  fiber  optic  signal  quality 
means  that  remote  office  and  home-based  users  feel 
like  they're  working  right  down  the  hall. 

Our  Campus-Star",  Campus-REX'  and  Megabit  Modem" 
install  in  minutes,  connecting  facilities  up  to  5  miles 
apart  over  your  Ethernet  network.  Or,  connect  through 
your  telco.  Either  way,  you'll  save  big  bucks. 

With  variable  transmission  rates  from  384  kbps  to 
2  Mbps,  PairGain  offers  the  lowest  cost  way  to  boost 
your  company's  network  capacity.  The  payoff  is 
increased  productivity  with  telecommuting,  remote 
LAN  access,  a  company-wide  intranet,  videoconferencing, 
Internet  access  and  a  host  of  other  high  bandwidth 
capabilities.  So  get  in  the  megabit  commuter  lane  and 
watch  your  business  grow.  PairGain  can  show  you  the  way. 

For  more  information  see  our  Web  site,  or 
call  800-370-9670. 


I  PairGain 

The  CopperOptics  Company 


InBox 


talking  about  125,000  EDI  purchase 
orders  and  invoices  per  month  to  add  up 
to  $50,000  in  charges.  Anyone  who  has 
been  doing  EDI  for  any  length  of  time  will 
tell  you  that  this  is  the  activity  of  a  very 
large,  EDI-intensive  company. 

What  was  even  more  comical  than  the 
various  exaggerations  was  the  lack  of 
any  mention  of  integration  when  dis¬ 
cussing  EC  architectures  and  solutions. 
Radosevich  and  several  Web-based  EC 
solution  pundits  are  only  looking  at  the 
home  consumer  side  of  the  EC 
equation.  Imagine  the  environ¬ 
ment  in  which  a  multibillion- 
dollar  corporation  with  tens  of 
thousands  of  employees  does 
its  purchasing  via  Web  brows¬ 
ers.  Those  companies  often 
have  bases  of  hundreds  or 
even  thousands  of  active  ven¬ 
dors.  Each  of  them  would 
have  its  own  Web  site  with  its 
own  form  for  order  entry. 

That  would  mean  hundreds 
of  Web  sites  to  connect  to, 
hundreds  of  different  order- 
entry  procedures  and  varying  function¬ 
ality. 

Until  the  client  side  of  Web-based  EC 
software  interacts  with  legacy  systems, 
those  simple-minded  approaches  may 
work  well  for  consumer-based  com¬ 
merce  but  cannot  hope  to  add  value  in 
the  business  place.  Hence,  electronic 
data  interchange  is  not  “dead”  by  any 
means.  It  will  continue  to  be  a  viable  and 
cost-effective  solution  for  business  as 
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long  as  systems  integration  is  important. 

Darrell  Teague 

Systems  Analyst 
Ferguson  Enterprises 
Newport  News,  Va. 
dteague@ferginc.com 

With  regard  to  your  recent  article  “The 
Once  and  Future  EDI”:  Well  said. 

Martin  Herzfeld 

pmg@dnai.com 


READING 

BLUEPRINTS 

It  was  with  great  interest  that  I  read 
Barbara  Reilly’s  column,  “Blueprints  for 
the  Electronic  Store”  [Dec.  15,  1996/Jan. 
1,  1997].  The  article  was  right  on  the 
money  regarding  the  need  to  address 
architecture  and  infrastructure. 

Recently,  I  led  efforts  at  BellSouth  to 
transition  its  staff  to  object-oriented  devel¬ 
opment.  The  transition  addressed  tools, 
training  and  mentoring  (infrastructure), 
and  the  development  and  systems  archi¬ 
tecture.  Changes  of  this  magnitude  require 
three  assets  that  are  very  difficult  to  come 
by  in  today’s  IT  shops:  time,  money  and 
management  commitment. 

While  it  is  possible  to  document  the 
cost  of  technology  migration  and  to 
attempt  to  quantify  the  benefit  in  a  busi¬ 
ness  case  (thereby  getting  an  allocation 
of  time  and  money),  without  continuous 
management  buy-in,  efforts  will  quick¬ 
ly  be  stymied  and  will  eventually  fail. 
That  is  true  of  any  technology  migra¬ 
tion,  whether  object  orientation  or  elec¬ 
tronic  commerce. 

I  also  appreciated  Reilly’s  focus  on  the 
three  styles  of  Internet-compatible 
online-transaction  processing  architec¬ 


tures  and  the  need  to  evolve  from  the 
lowest  to  the  highest  over  time.  While 
she  noted  many  products  in  the  “dis¬ 
tributed  presentation”  category,  the 
“remote  presentation”  and  “distributed 
function”  areas  were  noticeably  devoid 
of  tools.  Such  is  the  case  as  technology 
matures. 

Our  company,  Applied  Reasoning,  is 
preparing  to  release  a  product  that  ful¬ 
fills  the  need  for  remote  presentation. 
Classic  Blend  allows  the  user  interface 
to  be  deployed  using  Java  (preserving 
all  user  interface  functionality), 
while  keeping  the  business 
logic  and  data  secure  within  the 
enterprise. 

Norman  Bunn 

Director  of  Operations 
Java,  Smalltalk  and 
Internet  Solutions 
Applied  Reasoning 
Raleigh,  N.C. 
bunn@arscorp.com 

FINGERS  OUT  OF  HAND 
Hey,  those  drawings  on  Pages  48 
and  63  [“The  Electric  Handshake,” 
Dec.  15,  1996/Jan.  1,  1997]  showing 
six-fingered  hands  are  a  little  scary! 
What’s  the  implication  there? 

Ronne  Rogin 
Contract  Specialist 
U.S.  Department  of  State 
Washington 

RoginR@IMMFAWPOA.us-state.gov 

Our  design  department  tells  us  that  the 
extra  finger  was  intentional.  The  artist's 
style  is  to  draw  big  hands  with  many 
fingers.  The  original  design  called  for 
seven(l)  fingers,  but  there  just  wasn’t 
enough  space. 

WINDOW  SCREENING 
While  reading  the  Dec.  15,  1996/Jan.  1, 
1 997,  special  issue,  I  noticed  that  on  the 
first  page  of  each  major  article  there  is  a 
“Reader  ROI”  window  summarizing 
the  content  of  the  article.  I  find  the  win¬ 
dow  most  helpful.  Congratulations  on 
an  excellent  idea. 

Gary  Moss 

Director  of  Information  Services 
MBC  Group 
Minneapolis 
wgm@winternet.com 
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Columbus  used  the 
information  he  knew  to 
be  accurate,  combined 
it  with  the  expertise 
he  possessed  and  drew  a 
conclusion  that  changed  the 
way  we  look  at  the  world. 

As  a  young  man,  Columbus 
spent  hours  looking  westward 
across  the  Atlantic  at  ships 
coming  into  port.  First,  he 
would  spot  the  top  of  a  ship's 
mast.  Then,  slowly,  more  of  it. 
Finally,  the  entire  ship  would 
become  visible.  At  first 


HOW  CAN  A  SHIP  RISING  OUT  OF  THE  OCEAN 
CHANGE  THE  WAY  YOU  LOOK  AT  THE  WORLD? 


AT  ACXIOM,  WE  KNOW  THAT  A  BETTER  UNDERSTANDING 
OF  DATA  ALWAYS  LEADS  TO  GREAT  DISCOVERIES. 


puzzled,  Columbus  soon  recognized 
he  was  witnessing  proof  that  the 
world  was  indeed  round. 

At  Acxiom,  we've  built 
a  multi-national  company  on 
the  powerful  premise  that 
valid  data  in  the  right  hands 
at  the  right  time  can  have  a 
powerful  effect  on  your  world. 

Through  Acxiom's  integration, 
management,  and  split-second 
delivery  of  data  to  companies 


across  America,  we  are  helping  our 
customers  turn  information  into 
profits  and  providing  data 
warehousing  and  business 
decision  support  for  the  most 
complex  marketing  challenges. 
As  the  leading  provider  of  data  and 
information  services,  Acxiom  can  help 
you  enhance  your  business  world  and 
explore  it  better. 

Build  on  your  knowledge 
with  Acxiom.  It's  how  you  know. 


AgtlOM 

HOW  YOU  KNOW 

1 -888-3ACXI0M  •  WWW:  http://www.acxiom.com 
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These  days,  how  you  look  is  more  important  than  ever. 

Whether  you're  launching  a  new  campaign  on  the  Internet,  deploying  sales  kiosks  across  the  country  or  motivating  your  sales  force 
on  your  Intranet,  multimedia  is  the  name  of  the  game. 

Sexy,  exciting,  multimedia  apps  communicate  in  an  entirely  new  way  that  can  boost  profits  while  reducing  costs.  The  key  is  object 
technology.  Everyone  is  talking  about  it.  But,  only  one  company  delivers  a  complete  and  proven,  object-oriented,  multimedia  DBMS. 

Meet  Jasmine™  from  Computer  Associates. 

It’s  a  true  multi-platform,  object-oriented  database  that  supports  all  multimedia  datatypes,  including  video, 
audio  and  animation.  Jasmine  leaves  behind  all  the  limitations  of  relational  and  hybrid  databases.  It  has  a  fully 
integrated  development  environment  that  allows  you  to  develop  your  applications  easily  and  deploy  them  any¬ 
where:  Internet,  Intranet  and  client/server. 

To  learn  more  about  Jasmine,  come  to  a  free  half-day  management  briefing.  You’ll  see  real-world  exam¬ 
ples  of  how  companies  like  yours  are  using  Jasmine  to  stand  out  from  the  crowd  —  and  beat  the  competition. 

You’ll  go  home  with  a  FREE  Jasmine  Demo  CD  and  a  better  understanding  of  what  Jasmine  can  do  for  you. 

Call  1-888-7JASMINE  to  attend  our  FREE  Management  Briefing 
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Software  superior  by  design. 
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"The  journey  to  component-based  develop¬ 
ment  is  not  easy,  but  it's  one  that  every¬ 
one  in  IS  is  going  to  have  to  make  over  the 
next  few  years." 

-Wayne  Ratz 
Vice  President  of  Application  Systems 
General  Accident  Insurance 

Application  software  is  the  one  of  the  most  critical  components  to  enter¬ 
prise  success.  Think  back  about  15  years  or  so  to  when  word  processing 

and  spreadsheets  ruled  the  desktop. 

The  biggest  benefit  was  decreased  duplica¬ 
tion  of  effort.  One  could  create  templates 
to  use  over  and  over  again,  reducing  the 
reinvent-the-wheel  syndrome  that  was 
once  so  prevalent  in  the  business  world. 

Although  the  concept  of  reuse  has 
been  around  for  a  while,  some  compa¬ 
nies  are  beginning  to  apply  the  idea  to 
their  underlying  software  code.  CIOs 
have  started  asking  themselves,  “Why 
start  from  scratch  when  there’s  a  possi¬ 
bility  of  reusing  software  code  from 
other  applications?”  If  your  company 
squeezing  every  ounce  of  productivity  out 
of  its  people,  it  makes  sense  to  look  at  software-code  reuse  as  a  viable  alter¬ 
native  to  building  applications  from  the  ground  up. 

As  you  will  read  in  our  special  report  on  software  reuse,  beginning  on 
Page  34,  the  biggest  barriers  to  component-based  development  are  cul¬ 
tural — not  technological.  But  changing  minds  and  processes  is  what  the 
CIO’s  job  is  all  about.  Working  closely  with  vendors,  outsourcing  partners 
and  software  developers  is  the  key  to  getting  your  IS  department  to 
embrace  new  concepts — especially  those  that  will  keep  your  company 
competitive. 

tohwu  u. 

P.S.  Please  be  sure  to  join  us  May  1 8-21  at  the  next  WebMaster  Perspec¬ 
tives  conference,  “A  Tale  of  Two  Webs:  Making  Your  Intranet  and  the 
Internet  Pay  Off,”  at  the  Doral  Golf  Resort  &  Spa  in  Miami.  For  more 
information,  visit  www.cio.com  or  call  us  at  800  355-0246. 
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the 


answer  is 


Deloitte  & 
Touche 

& 


©1997  Deloitte  &  Touche  LLP.  Deloitte  &  Touche  refers  to  Deloitte  S  Touche  LLP  and  related  entities. 


E  W  S  ,  INSIGHT,  HUMOR,  REVIEWS 

Edited  by  Alice  Dragoon 


Channels 


TV  signals)  for  years.  But  recent  tech¬ 
nological  developments  have  turned 
VBI  into  a  hot  commodity — and  may 
hasten  the  adoption  of  interactive  TV. 

In  October  1996,  the  Japanese  net¬ 
work  TV  Tokyo  began  broadcasting  a 
half-hour  game  show  in  which  viewers 


answer  teletext  survey  questions  in 
real-time  using  their  remote  controls — 
the  only  input  device  needed.  Based  on 
a  positive  response,  TV  Tokyo,  which 
has  14  million  viewers,  has  expanded 
its  interactive  lineup  into  prime  time, 
says  Barak  Kassar,  senior  manager  of 


MUST-SEE-NOW  TV 


Sure,  Must  See 
TV  is  entertaining.  But  must-see-now 
TV — for  example,  getting  the  local 
weather  forecast  without  having  to 
wait  till  the  end  of  the  evening  news — 
may  be  just  around  the  corner.  Using 
technology  that’s  been  available  for 
about  20  years,  cable  broadcasters  such 
as  the  Weather  Channel,  Court  TV  and 
Cable  News  Network  Inc.  (CNN)  plan 
to  transmit  information  from  the  Web 
to  cable  subscribers’  existing  set-top 
boxes.  They’ll  do  it  by  tapping  into  the 
vertical  blanking  interval  (VBI),  ten 
9,600-bps  data  lines  available  in  every 
U.S.  broadcast  or  cable  channel. 

U.S.  broadcasters  have  long  relied 
on  VBI  for  closed  captioning,  and  Eu¬ 
ropean  broadcasters  have  used  it  to 
transmit  teletext  (text  broadcast  over 
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The  Young  and  the  Networked 


TEEN  ADMINISTRATORS 


Can'tfind  qualified  people  to  troubleshoot  your  network?  You  may  want 
to  check  your  local  high  school.  Believe  it  or  not,  1 00  high  schools  across  the  country  have  begun  turn¬ 
ing  out  teenage  Novell  NetWare  administrators — certified  ones  at  that. 

Two  high  schools  in  Charlotte,  N.C.,  are  among  the  first  to  participate  in  the  Novell  Education  Aca¬ 
demic  Program,  a  four-semester  classroom  and  internship  program  that  trains  students  in  the  ins 
and  outs  of  NetWare.  After  high  school,  graduates  of  the  program  can  enter  the  technical  workforce 
directly  or  go  on  to  higher  certification  levels  such  as  CNE  (Certified  NetWare  Engineer).  Local  busi¬ 
nesses  have  donated  the  computers  and  wiring  forthe  program,  and  Cedalion  Education,  a  Char¬ 
lotte-based  technical  training  company,  is  providing  teacher  training  and  project  management. 

A  grant  from  the  state  of  North  Carolina  covers  teacher  salaries. 

The  Charlotte  program's  sponsors — the  Information  Technology  Council  of  the  Charlotte 
Chamber  of  Commerce,  Cedalion  Education  and  the  Charlotte-Mecklenburg  School  District — 
plan  to  add  Microsoft  to  the  curriculum  and  may  eventually  roll  out  the  program  to  the  entire 
school  system.  "One  classroom  in  each  of  the  1 2  high  schools  could  generate  500  students  per 
year  with  a  vendor  certification,"  says  James  R.  Bensman,  CEO  of  Cedalion.  For  more  informa¬ 
tion  on  the  Charlotte  program,  contact  Cedalion  at  704  549-4765  or  www.cedalion.com.  For 
information  on  Novell  Inc.'s  education  program,  call  Aaron  Osmond,  academic  programs 
manager  for  Novell's  education  division,  at  801  222-7890  or  visit  http://education.novell.com.  ■ 
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The  SAS' 


Data  Mining 

Solution*' 

The  Power 
to  Predict 


With  SAS  software’s  integrated  data 
mining  and  decision  support  tools,  you 
can  uncover  all  the  business  “secrets” 
locked  away  in  your  massive  databases... 
hidden  patterns  that  can  make  your 
business  more  profitable,  more  competitive, 
and  more  responsive  to  customer  needs. 

Exploit  your  data  by  exploring  it  with  the 
richest  variety  of  data  analysis  and  visualization 
techniques.  Use  OLAP,  neural  networks,  tree- 
based  models,  churn  analysis,  and  traditional 
statistics  to  improve  customer  retention,  target  key 
prospects,  profile  market  segments,  detect  fraud,  analyze 
response  rates,  and  much  more.  And  then  empower  decision 
makers  to  exploit  and  share  this  newfound  information  using  the 
most  sophisticated  forecasting,  reporting,  and  graphics  tools. 


Visit  Us  on  the  Webm 
and  Look  into  the  Future 
of  Data  Discovery 


SAS  software  is  helping  the  Fortune  100  and  thousands  of 
other  companies  —  in  banking,  financial  services,  insurance, 
health  care,  retail,  telecommunications,  and  more  —  unlock  the 
full  potential  of  their  data  warehouses.  Now,  discover  us  for 

yourself  at  www.sas.com/datarnining/or  by  giving  us  a 
call  at  919.677.8200 


SAS  Institute  Inc 


The  Business  of  Better  Decision  Making 


Phone  919.677.8200  Fax  919.677.4444  In  Canada  1.800.363.8397  E-mailcio@sas.com 


>A>  is  u  registered  trademark  of  SAS  Institute  Inc.  Copyright  A  1997  by  SAS  Institute  Inc. 
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corporate  communications  for  Wink 
Communications,  the  Alameda, 
Calif.-based  company  that  invented 
the  technology  behind  TV  Tokyo’s 
Intertext  and  similar  teletext  services. 

Between  Feb.  5  and  March  5  of  this 
year,  the  Weather  Channel  tested 
Wink’s  teletext  technology  on  50,000 
cable  subscribers  in  Cincinnati.  During 
the  trial,  the  Weather  Channel  continu¬ 
ously  broadcast  local  weather  forecasts 
in  a  Web-like  hypertext  format; 
viewers  used  their  remote  controls  to 
navigate  through  information  dis¬ 
played  on  their  television  screens.  Once 
the  service  goes  live,  ski  reports  likely 
will  be  added  as  well.  Eventually,  the 
Weather  Channel  plans  to  deploy 
Wink’s  technology  nationally  to  let 
viewers  access  local  content  and — 
it  hopes — view  interactive  advertise¬ 
ments.  “The  application  allows  us  to 
[add  value]  for  our  advertisers,”  says 
Todd  Walrath,  director  of  product  de¬ 
velopment  for  the  Weather  Channel. 
But  without  national  reach,  he  says,  it’s 
hard  to  convince  advertisers  that  inter¬ 
active  ads  are  worth  the  investment. 

As  one  of  the  first  interactive  tech¬ 
nologies  that  doesn’t  require  addi¬ 
tional  hardware  in  the  home,  teletext 
capability — which  can  be  activated  by 
downloading  Wink  software  to 
viewers’  cable  boxes  overnight — 
might  help  broadcasters  find  them¬ 
selves  a  niche  between  home  PCs  and 
Web  television,  Kassar  says.  “Simplic¬ 
ity  really  is  the  key,”  he  says.  “Sure, 
some  people  using  [Wink]  are  Web- 
savvy,  but  others  are  not  going  to  be 
computer-literate.  The  whole  idea 
was  to  figure  out  a  way  to  do  this  in¬ 
expensively  so  the  software  could  just 
fit  in  the  cracks  of  the  equipment  peo¬ 
ple  are  already  buying.” 

With  250  million  televisions  in  the 
United  States,  even  a  market  share  of 
1  percent  for  a  new  TV-based  inter¬ 
active  service  could  guarantee 
250,000  viewers,  which  equals  the 
Weather  Channel’s  daily  count  of 
unique  visitors  to  its  Web  site  at 
www.weather.com.  “We  keep  a  spe¬ 
cial  eye  out  for  television-type  tech¬ 
nologies,”  says  Walrath.  “They 
could  be  twice  as  big  as  your 
Web  site.”  -Heath  Row 


Known  Quantities 


VICTIM  NOTIFICATION 


On  Dec.  6, 1 993,  Donovan  Harris  shot  and  killed  his 
ex-girlfriend,  Mary  Byron,  as  she  left  work  at  a  shopping  mall  in  Jefferson 
County,  Ky.  A  few  days  earlier,  Harris  had  been  released  from  jail  on  bond  after 
allegedly  kidnapping  and  raping  Byron  at  gunpoint.  Byron  had  no  idea  she  was 
at  risk  for  a  second  attack,  because  no  one  had  told  her  Harris  had  been  freed. 
She  died  on  her  21st  birthday. 

Although  Byron's  murder  was  a  tragically  common  crime,  in  its  aftermath 
came  something  new:  an  automated  phone  notification  system  for  victims  of 
violent  crime.  A  year  after  Byron's  death,  her  parents  helped  unveil  the  Victim 
Information  and  Notification  Everyday  (VINE)  system.  Today,  the  state- 
sponsored  system  operates  24  hours  a  day,  365  days  a  year,  notifying  victims 
throughout  Kentucky  when  criminals  have  been  released  from  jail  or  moved  to 
alternative  programs  such  as 
home  incarceration.  Victims 
anywhere  in  the  state  can 
register  over  the  phone  to 
receive  automatic  updates 
on  the  status,  location  and 
next  court  date  of  inmates.  When  a 
prisoner's  status  changes,  VINE 
begins  calling  the  registered 
victim  every  30  minutes  for 
24  hours  until  he  or  she  an¬ 
swers  the  phone  and  punches 
a  four-digit  confirmation  number 
on  the  telephone  keypad.  A  Dialogic 
Corp.  voice-recognition  feature  and  call-center 
operators  enable  people  without  touch-tone  phones  to  register  with  VINE  as 
well.  So  far,  6,885  victims  have  registered  in  Jefferson  County. 

"The  Jefferson  County  VINE  interfaces  directly  with  the  county  jail's  Hewlett- 
Packard  mainframe  system,"  says  Yung  Nguyen,  co-president  of  Louisville- 
based  VINE  Co.,  a  private  company  that  developed  the  technology.  But  VINE  is 
compatible  with  just  about  any  platform,  he  says.  The  system's  proprietary  soft¬ 
ware,  which  was  developed  in  C  and  runs  on  PCs,  links  directly  into  correctional 
departments'  computerized  criminal  booking  systems. 

Today,  some  300  counties  in  more  than  1 8  states  have  ordered  the  system  from 
the  VINE  Co.,  and  other  applications  of  the  technology  are  in  the  works.  For  in¬ 
stance,  VINE  will  allow  Ohio  police  to  access  crucial  information  around  the  clock 
such  as  whether  a  subject  of  a  restraining  order  has  the  right  to  carry  a  gun.  And  in 
Pennsylvania,  VINE  is  linked  to  the  state's  court  systems,  making  it  possible  for  a 
parent  who  shares  custody  of  a  child  to  find  out  if  the  other  parent  has  been  in 
trouble  with  the  law.  For  details,  call  the  VINE  Co.  at  502  561-8463.  -Peter  Fabris 
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Our  Customers  Feel  Free,  to  pursue  interests  that  go  beyond 

computer  data  backup. They  realize  it  can  take  less  than  a  second  for  a  drive  crash,  virus 
or  voltage  spike  to  destroy  their  most  valued  computer  component  —  information. 
But  they  also  know  their  priceless  data  is  backed  up  by  Exabyte. 

In  fact,  more  than  one  million  Exabyte  tape  storage  devices  are  hard  at  work  right  now 
—  onboard  the  space  shuttle  and  under  the  sea,  and  in  homes  and  offices  like  yours. 

Exabyte  is  the  largest  company  dedicated  solely  to  the  design  and  production  of  tape 
storage  systems  —  with  capacities  ranging  from  680  megabytes  to  3  2  terabytes. 

Today,  Exabyte  tape  drives  and  automated  tape  libraries  remain  the  first  choice  of  the 
world’s  leading  computer  manufacturers  and  resellers. 

For  more  information  visit  our  web  site  at:  http ://www. exabyte. com 

Exabyte.  Since  1985,  helping  you  make  the  best  of  backup. 


Exabyte's  newest  Snim  tape 
drive,  based  oil  Exabyte 
Mammoth  technology,  hacks 
tip  it)  dt  of  data  in  less  than 
1  hours.  Available  standalone 
and  in  Exabyte's  automated 
tape  libraries. 
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©1997  Exabyte  Corporation.  Exabyte  is  a  trademark  of  Exabyte  Corporation  Exabyte  Corporation,  1685  38th  Street,  Boulder,  Colorado  80301  USA 


PENTIUM.PRO 

PROCESSOR 


PROOF  THERE  ARE  NUMBERS  IN  SAFETY. 


DELL  POWEREDGE  SERVERS- WHERE  CRASH  PROTECTION  COMES  STANDARD. 


ENTRY  LEVEL  SERVER 

MID-RANGE  SERVER 

DELL?  POWEREDGE  2100  SERVER 

DELL  POWEREDGE  4100  SERVER 

200MHz  PENTIUM’'  PRO  PROCESSOR 

200MHz  PENTIUM  PRO  PROCESSOR 

(Dual  Processor  Capable) 

(Dual  Processor  Capable) 

•  64MB  ECC  EDO  Memory  (1GB  Max.) 

•  128MB  ECC  EDO  Memory  (1GB  Max.) 

•  256KB  Integrated  L2  Cache 

•  512KB  Integrated  L2  Cache 

•  2  Integrated  SCSI-3  Controllers 

•  2  Integrated  SCSI-3  Controllers 

•  4GB  Fast/Wide  SCSI-2  Hard  Drive 

•  4GB  Fast/Wide  SCSI-2  Hard  Drive 

•  8X  SCSI  CD-ROM  Drive 

•  8X  SCSI  CD-ROM  Drive 

•  3ComT  10/100  PCI  Network  Adapter 

•  Intel  EtherExpress  Pro/100  PCI  NIC 

•  Intel’'  LANDesk1”  Server  Manager  v2.5 

•  Intel  LANDesk  Server  Manager  v2.5 

•  6  Expansion  Slots:  3  PCI,  3  EISA 

•  8  Expansion  Slots:  5  PCI,  3  EISA 

•  6  Drive  Bays:  3  External,  3  Internal 

•  10  Drive  Bays:  4  External,  6  Internal 

•  3  Years  of  NBD  On-site'  Service 

•  3  Years  of  NBD  On-site  Service 

•  24x7  Dedicated  Server  Hardware 

•  24x7  Dedicated  Server  Hardware 

Technical  Support 

Technical  Support 

$3799 

$6949 

Business  Lease0:  $1 33/Mo. 

Business  Lease:  $251/Mo. 

Order  Code:  200173 

Order  Code:  200160 

HIGH-END  SERVERS 

DELL  POWEREDGE  6100  SERVER 

DELL  POWEREDGE  6100  SERVER 

2x200MHz  PENTIUM  PRO  PROCESSORS 

4x200MHz  PENTIUM  PRO  PROCESSORS 

(Quad  Processor  Capable) 

(Quad  Processor  Capable) 

•  128MB  ECC  EDO  Memory  (2GB  Max.) 

•  256MB  ECC  EDO  Memory  (2GB  Max.) 

•  1024KB  Integrated  L2  Cache 

•  2048KB  Integrated  L2  Cache 

•  2  Integrated  Ultra/Wide  SCSI-3 

•  2  Integrated  Ultra/Wide  SCSI-3 

Controllers 

Controllers 

•  2x4GB  Ultra/Wide  SCSI-3  Hard  Drives 

•  4x4GB  Ultra/Wide  SCSI-3  Hard  Drives 

•  8X  SCSI  CD-ROM  Drive 

•  8X  SCSI  CD-ROM  Drive 

•  Intel  EtherExpress  Pro/100  PCI  NIC 

•  2  Intel  EtherExpress  Pro/100  PCI  NIC 

*  Intel  LANDesk  Server  Manager  v2.5 

•  Intel  LANDesk  Server  Manager  v2.5 

•  10  Expansion  Slots:  6  PCI,  4  EISA 

•  10  Expansion  Slots:  6  PCI,  4  EISA 

•  10  Drive  Bays:  6  External,  4  Internal 

•  10  Drive  Bays:  6  External,  4  Internal 

•  3  Years  of  NBD  On-site  Service 

»  3  Years  of  NBD  On-site  Service 

•  24x7  Dedicated  Server  Hardware 

•  24x7  Dedicated  Server  Hardware 

Technical  Support 

Technical  Support 

$13,999 

$22,999 

Business  Lease:  $490/Mo. 

Business  Lease:  $805/Mo. 

Order  Code:  200184 

Order  Code:  2001 86 

ADD  MICROSOFT  NT  SERVER  4.0  TO  ANY  OF  THE  ABOVE  SYSTEMS  FOR  $799. 


Crash  protection  isn't  just  something  that  people  need  in 
their  cars.  It's  something  that  every  business  needs  from  a 
server.  So  the  fact  that  Dell  servers  have  become  such 
bestsellers  says  something  loud  and  clear  to  the  industry. 
It's  proof  that  people  are  sick  and  tired  of  reliability  being 
an  option  they  have  to  pay  for  through  the  nose.  And  that 
Dell  PowerEdge  servers  are  doing  what  we  designed  them 
to  do:  delivering  reliability  and  performance  that  exceeds 
the  industry's  standards.  At  prices  well  beneath  the  industry's 
standards.  Take  a  glance  at  the  specs  of  our  new  Pentium 
Pro  processor-based  PowerEdge  line  and  you'll  see  what 
we  mean.  From  the  high-end  reliability  of  the  Dell  PowerEdge 
6100,  loaded  with  redundant  processors  and  hot-pluggable 
drives,  down  to  the  Dell  PowerEdge  2100,  a  full-featured, 
rock-solid  server  for  the  price  of  a  desktop,  one  feature 
remains  consistent:  value.  And  that's  something  no  business 
can  afford  to  overlook. 

IXA.L 

800-759-1170 

http://www.dell.com 

Mon-Fri  7am-9pm  CT -  Sat  10am-6pm  CT*Sun  12pm-5pm 
In  Canada?  call  800-839-0148 
In  Latin  America?  call  512-728-4685 
GSA  Contract  #GS-35F-4076D 

Keycode  #13037 
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Off  the  Shelf 


Software  Reuse  Reading 

FOR  A  COMPREHENSIVE  look  at  component-based  development, 
we  recommend  Paul  G.  Bassett’s  Framing  Software  Reuse: 
Lessons  From  the  Real  World  (Prentice  Hall,  1997).  Bassett,  a 
30-year  IS  veteran  and  senior  vice  president  of  research  at  Netron  Inc. 
in  Toronto,  speaks  to  executives  and  technical  managers  in  a  voice 
free  of  tech-speak.  He  also  delivers  on  the  book’s  subtitle  by  including 
the  results  of  an  independent  audit  of  development 
productivity  among  nine  organizations  that  build 
applications  from  reusable  components.  You’ll  find 
familiar  names  represented;  a  large  telephone  com- 
If*-  pany,  a  major  bank  and  a  leading  retailer  were 

among  the  study  participants.  The  audit’s  bottom- 
line  finding:  Average  productivity  on  projects  un¬ 
dertaken  by  the  nine  reuse  organizations  was  nearly 
1 0  times  higher  than  that  on  more  than  4,000  com¬ 
pleted  business  systems  projects  developed  in  tradi¬ 
tional  IS  shops.  Bassett  describes  in  exquisite  detail 
the  calculations  that  yielded  that  order-of-magnitude  im¬ 
provement,  although  reading  the  book  might  have  been  easier 
had  the  statistics  come  later  in  Bassett’s  exposition.  He  likely  put  the 
study  stats  first  because  he  knows  that  executives  want  results,  not 
vendors’  promises.  It’s  a  forgivable  sin. 

Frame  technology — Bassett’s  invention  and  the  methodology  the 
study  companies  used — and  object  orientation  have  subtle  differ¬ 
ences  that  may  interest  technical  managers.  Fortunately,  the  details 
are  largely  confined  to  one  section  of  the  book  that  an  executive  can 
safely  skip  in  favor  of  the  book’s  discussion  of  what  a  commitment  to 
reuse  means  in  managerial  terms.  Bassett  proposes  a  diagnostic  of 
organizational  readiness  akin  to  the  Software  Engineering  Institute’s 
Software  Process  Capability  Maturity  Model.  He  also  discusses  how 
CIOs  should  deal  with  their  customers  and  provides  sound  advice  on 
managing  the  transition  to  a  culture  of  reuse.  As  a  primer  in  software 
reuse  and  its  benefits,  pitfalls  and  rewards,  Bassett’s  book  is  well 
worth  a  reader’s  attention. 

Because  it’s  hard  to  manage  what  you 
don’t  measure,  Jeffrey  Poulin  addresses  the 
principles  and  practices  of  reuse  metrics  in 
Measuring  Software  Reuse:  Principles, 

Practices,  and  Economic  Models  (Addison 
Wesley  Longman,  1997).  In  addition  to 
making  a  strong  case  for  reuse  measurement, 

Poulin  details  what  to  count  as  reuse  and 
how  to  count  it.  He  presents  several  models 
for  gathering  measurements  and  evaluates 
their  suitability  to  various  situations.  A  chapter 
on  how  to  use  metrics  to  motivate  software  reuse  sug¬ 
gests  ways  to  evaluate  results  published  by  others.  Poulin’s 
work  is  a  nice  complement  to  the  statistics  in  Bassett’s  book. 

-Miryam  Williamson 


Wannabe@ 

smartypantsU.com 


NAME  DROPPING 


In  a  status-obsessed 
society,  something  as  seemingly  insignifi¬ 
cant  as  your  e-mail  address  may  speak  vol¬ 
umes  about  you.  Those  who  feel  pressed  to 
impress  might  be  willing  to  pay  for  one  that 
says  what  they  want  people  to  hear.  One 
company  betting  on  that  willingness  is 
New  Century  Technologies  Inc.,  which 
offers  its  customers  the  cachet  of  a  presti¬ 
gious  school  affiliation 
without  the 


agony  oftaking 
the  SATs  or  sit¬ 
ting  through 
another 
semester  of 
semiotics. 

Forjust$25a 
year,  the  com¬ 
pany  rents  e-mail 
aliases  that  include  a  top  university's  do¬ 
main  name.  The  so-called  vanity  address 
easily  might  be  mistaken  for  the  real  McCoy 
if  the  recipient  doesn't  notice  that  it  ends  in 
.com  instead  of.edu. 

Although  it  might  be  handy  to  have 
prospective  customers  thinking  you're  a 
Harvard  man  each  time  they  contact  you  at 
john@horvard.com,  poseurs  in  the  wired 
world  may  face  harsh  censure.  Officials  from 
Georgia  Tech  and  Florida  State  universities 
have  already  spoken  up  on  the  subject  in 
the  Chronicle  of  Higher  Education,  and  both 
schools  plan  to  fight  any  attempt  to  misuse 
their  names.  Allan  Ryan,  university  attorney 
at  Harvard  College,  says  that  his  institution 
keeps  a  watchful  eye  on  the  use  of  its  name. 
"If  our  name  were  being  used  in  a  way  that 
might  confuse  the  public  mind,  then  we 
would  have  to  take  action,"  he  says. 

So  before  you  ask  for  an  e-mail  P.O.  box  on 
Park  Avenue,  make  sure  your  request  won't 
land  you  on  Skid  Row.  ■ 
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PeopleSoft  s  workflow- enabled  applications  route 
the  right  information  to  the  right  people  at  the  right 
time  in  the  right  form.  That  can  not  only  improve  the 
productivity  of  your  organization,  but  can  also 
facilitate  business  process  redesign,  reduce  paperwork, 
and  automate  administrative  tasks.  How's  that  for 
working  hard? 

PeopleSoft’s  workflow  is  open,  so  it  can  integrate 
with  a  variety  of  third-party  products.  You  can  use 
email  for  notifications,  and  electronic  forms  for  turn¬ 
ing  around  approvals.  Or  use  internet  forms  and 
interactive  voice  response  systems  to  communicate 
with  PeopleSoft  applications. 


And,  unlike  some  solutions,  PeopleSoft’s  are 
flexible  enough  for  you  to  define  your  own  processes 
and  procedures.  In  other  words,  PeopleSoft  adapts  to 
the  way  you  work,  not  the  other  way  around. 

No  wonder  1350  organizations  worldwide  have 
chosen  PeopleSoft.  For  more  information  on  how 
PeopleSoft’s  workflow  solutions  can  help  your  organiza¬ 
tion,  call  800-947-7753  and  ask  for  our  workflow  white 
paper.  Or  visit  us  at  workflow.peoplesoft.com.  You'll 
discover  we  have  the  technology,  the 
people,  and  the  commitment  it  takes 
to  help  you  increase  your  productivity. 

Without  increasing  your  workload. 


Enterprise  business  applications  for  finance,  materials  management,  distribution,  manufacturing,  and  human  resources. 


©  1997  PeopleSoft.  Inc.  PeopleSoft  and  the  PeopleSoft  logo  arc  registered  trademarks  of  PeopleSoft,  Inc. 


Trendlines 


software 

reuse 


Hey,  Hey,  We’re 
Like  Monkeys 

Paul  G.  Bassett,  senior  vice 
president  of  research  and  one 
of  the  founders  of  Netron  Inc. 
in  Toronto,  on  the  concept 
that  small  modifications  in 
software  components  can  ac¬ 
count  for  big  differences  in  the 
applications  built  with  them: 
"Few  people  are  aware  that 
we  share  over  98  percent  of 
our  genes  with  the  chim¬ 
panzee.  You  can  have  small 
differences  accounting  for 
huge  swings  in  the  ultimate 
shapeand  behaviorofthings. 
The  same  is  true  with 
software." 

The  Calm 
Before  the  Storm 

"Components  are  going  to  go 
through  an  absolute  tornado 
of  activity  in  October  and 
November  of  1 997. 1  can  be 
that  precise.  There  will  be 
major  commitments  from 
some  important  players  in  the 
first  half  of  1 997.  The  world's 
largest  industrial  corporation, 
based  in  Europe,  will  reveal 
that  it  has  been  building  com¬ 
ponents  with  these  vendors 
for  some  time.  By  fall,  interest 
and  excitement  about  com¬ 
ponents  will  have  reached  a 
critical  mass,  and  customers 
will  be  buying  components 
and  starting  component  as¬ 
sembly  projects  in  volume." 

-Brian  Morrow,  director  of  com- 
ponen  t-based  develop  men  t  for 
Texas  Instruments  Inc. 


For  a  special  report  on 
software  reuse, 

SEE  PAGE  34 


Minding  Your  Business 
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use  your  head  In  Topeka,  Kan.,  it’s  illegal  to  read  peo-  „  ^ 

pie’s  minds  for  money.  But  several  companies  on  the  East  ' - 1  4 

and  West  coasts  are  developing  technologies  that  will  enable 
people  to  operate  computers,  play  video  games  and  paint  .yb 

pictures  using  their  bioelectric  impulses  such  as  brain  waves 
and  heartbeats.  Many  early  adopters  are  using  the  technolo¬ 
gies  for  entertainment  and  artistic  applications,  yet  business 
uses  are  not  just  the  stuff  of  science  fiction.  IBVA  Technolo-  ;  A  A  }\  l  A  A  }\  i 

gies  Inc.,  for  example,  is  using  its  technology  to  monitor 
consumers’  responses  to  product  packaging,  and  a  company  called  The  Other  90%  has 
developed  a  six-word  vocabulary  that  users  can  think  instead  of  type.  (You  think  “in¬ 
ventory,”  and  the  word  appears  on  your  screen.)  Here,  then,  are  three  big  ideas  devel¬ 
oped  by  companies  that  are  putting  their  money  where  your  mind  is. 


‘4  29.50 
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The  Big  Idea:  BioMuse  and  the  hands-free  controller 

Company:  BioControl  Systems  Inc.  Palo  Alto,  Calif. 

Body  Parts  Involved:  Wireless  electrodes  attach  to  the  skin 

Reading  Material:  Muscle  activity,  eye  motion,  heart  rate,  brain  waves 

What  It  Does:  Gauges  depth  perception,  fires  guns  and  controls 

animated  characters  in  games 

Early  Adopters:  Volvo  Car  Co.,  IBM  Corp.,  Notre  Dame  University 

Piece  of  Their  Mind :  "We  are  able  to  use  the  face  to  control  a  computer  mouse. 

If  you've  got  a  head,  you  can  access  the  Net." 

-Anthony  Lloyd,  vice  president  of  sales  for  BioControl 

The  Big  Idea:  Interactive  Brainwave  Visual  Analyzer 

Company:  IBVA  Technologies  Inc.  NewYork 

Body  Parts  Involved:  Control  pack  is  worn  in  a  headband 

Reading  Material:  B  ra  i  n  waves 

What  It  Does:  Compose  music,  turn  on  laser-disc  players 

Early  Adopters:  Lucent  Technologies  Microelectronics  Group, 

Tandem  Computers  Inc. 

Piece  of  Their  Mind:  "Most  people  take  about  20  minutes  to  learn  how  to  control 

their  brain  waves,  but  some  take  longer.  This  sort  of  thing  come 
much  easier  to  people  who  have  been  meditating  for  years." 
-Helen  Meschkow,  executive  vice  president  of  technical 
and  customer  support  for  IBVA 


The  Big  Idea: 
Company: 

Body  Parts  Involved: 
Reading  Material: 
What  It  Does: 

Early  Adopters: 

Piece  of  Their  Mind: 


MindDrive 

The  Other  90%  San  Rafael,  Calif. 

MindDrive  sleeve  fits  on  a  finger 

Heart  rate,  temperature,  composite  neural  activity 

Play  skiing  and  bowling  games,  decide  whether  friends  fib 

Miramax  Films,  Easter  Seals  Society 

"The  first  time  people  do  it,  you  watch  their  face  and  they're 
totally  amazed.  People  who  go  to  the  computer  store  every 
day  are  more  apt  to  accept  things  at  face  value  than  a  head  of 
MIS,  who  might  want  to  tear  it  apart  and  figure  out  the 
technology." 

-David  Weiss,  a  technology  consultant  for  The  Other  90% 
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INDUSTRY  ANALYSIS  FROM  THE  RESEARCH  COMMUNITY 


Once  Is  Not  Enough 

Embarking  on  a  reuse  program  requires  more 
than  simply  announcing  the  program's  existence 

BY  RICHARD  HUNTER 


SOFTWARE  REUSE  is  among  the 
most  discussed  and  least  im¬ 
plemented  of  all  approaches 
to  improving  the  quality  and 
productivity  of  an  IS  organi¬ 
zation.  The  two  concepts  underlying 
reuse  are  so  simple  that  they  hardly 
require  explanation:  First,  do  not 
reinvent  that  which  has  already  been 
invented;  second,  construct  new  sys¬ 
tems  and  enhance  existing  systems 
using  building  blocks  that  already 


have  been  tested  and  proven. 

Just  as  many  people  avoid  begin¬ 
ning  an  exercise  program  because  it 
requires  a  change  in  routine,  system¬ 
atic  effort  and  some  initial  pain,  so 
organizations  avoid  software  reuse 
implementation.  And  just  as  the  ben¬ 
efits  of  exercise  are  obvious,  visible, 
well-documented  and  not  very  long 
in  coming,  so  are  the  benefits  of  soft¬ 
ware  reuse.  The  benefits  of  an  exer¬ 
cise  program  are  easy  to  measure: 


Just  stand  on  a  scale  and  you’ll  see 
them.  Calculating  the  return  on 
investment  of  software  reuse,  how¬ 
ever,  is  a  bit  more  tricky. 

An  estimated  75  percent  of  all 
application  development  organiza¬ 
tions  operate  at  level  one  of  the 
Software  Process  Capability  Maturity 
Model,  which  was  created  by  the 
Software  Engineering  Institute  of 
Carnegie  Mellon  University.  At  level 
one,  an  organization  has  no  develop¬ 
ment  methodology  or  formal  proce¬ 
dures  across  projects,  and  budgeting 
is  usually  done  on  a  project-by-proj¬ 
ect  basis.  The  good  news  for  an  infor¬ 
mation  executive  in  such  an  IS  shop 
is  that  within  the  organization,  he  or 
she  can  promote  a  reusability  pro¬ 
gram  as  a  key  driver  to  an  ongoing 
application  development  process 
because  it’s  tough  to  argue  with  the 
twin  goals  of  improving  quality  and 
efficiency. 


Synchronizing  a  Reuse  Program 

In  less  than  two  years,  an  organization  with  a  consistently  applied  software  reuse  methodology  can 
reach  a  "critical  mass"  of  developers  who  practice  reuse 


0  MONTHS 


3  MONTHS 


6  MONTHS 


9  MONTHS 


12  MONTHS 


Charter  the  project. 

Describe  goals,  objectives,  resources, 
constraints,  assumptions,  costs 
and  benefits. 


Select  and  apply  a 
development  methodology. 

Research  and  acquire  consistent  tools, 
processes  and  procedures. 


Create  a  catalog. 

Define  the  logic  by  which  software  artifacts 
will  be  cataloged;  introduce  that  system  into 
a  database  and  build  the  user  interface. 


Executive  standards. 

Identify  and  apply  standards 
for  design  and  quality. 


Establish  the  software  reuse  inventory. 

Encourage  developers  to  contribute  reusable 
components  to  the  repository. 


Measure  results. 

Identify  measurement  criteria.  Measure  via  reviews. 
Communicate  results  to  steering  committee,  project 
team  and  application  development  organization. 


Establish  a  "soft"  infrastructure. 

Assign  an  administrator  and  facilitators.  Assign  a 
quality-assurance  representative  to  the  project. 

Staff  a  steering  committee  and  technical  advisory  group. 


Implement  performance  incentives. 

Design  incentives  and  train  managers  to 
encourage  software  reuse. 


COMPILED  BY  R.  HUNTER 
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Isn't  it  time  you  thought  about  networking  people  and  information 


Secure, open  connections  that  extend  the  reach  of  your  business. 


Your  users  are  located  everywhere.  Just  like  your  information. 
Connecting  both  in  a  totally  open,  yet  secure,  managed 
environment  is  what  our  networking  strategy  is  all  about.  We  call 
it  the  Virtual  IP  Network  -  the  FTP  Software  family  of  products 
that  provide  IS  managers  with  new  levels  of  security,  manageability, 
customization,  and  connectivity  based  on  user  profiles  instead  of 
IP  addresses.  So  users  get  the  information  they  need,  and  you  get 
the  control  you  demand.  Imagine  the  productivity  potential.  The 
cornerstones  are  ready  now  -  OnNet®32  and  Internet  Gateway 
for  NetWare  -  with  more  to  come.  Curious  about  Virtual  IP 
Networks?  Call  us  for  your  Virtual  IP  Network  information 
packet  or  visit  our  Web  site. 

1-800-282-4FTP,  ext.  5308  •  http://www.ftp.com/vip/a210 

FTP  Software,  the  FTP  Software  logo,  and  OnNet  are  registered  trademarks  of  FTP  Software,  Inc. 


Introducing  The  Virtual  IP  Network,  only  from  FTP  Software. 


smart .  secure .  open,  connec  tions 

Betatw  the  onlv  ronnwtioa*  that  matter  are^CH  RS. 


Gartner  View 


Promote,  Don't  Simply  Enable 

Most  industry  literature  on  reuse  begins 
with  the  premise  that  reuse  is  a  technical 
matter  and  is  inevitable  once  technical 
issues  such  as  platform,  tool  selection  and 
integration  of  systems  are  resolved  (see 
“Bits  and  Pieces,”  Page  56).  That  view¬ 
point  is  especially  popular  in  literature  on 
object-oriented  technology  and  design. 
However,  the  premise  is  false.  Enabling 
reuse  does  not  ensure  reuse  any  more 
than  buying  a  rowing  machine  ensures 
the  buyer  will  exercise  regularly.  Reuse 
will  be  implemented  only  if  managers 
directly  foster  the  behaviors  that  are 
essential  to  reuse. 

Gartner  Group  Inc.  has  identified  the 
key  elements  of  a  program  designed  to 
enable  reuse  via  relevant  technical  sup¬ 
port  and  to  promote  reuse  via  changes 
in  organizational  and  individual  behav¬ 
iors.  Those  elements  include: 

■  An  inventory  of  reusable  artifacts 
{any  solution  that  can  be  incorporated 
fully  or  in  part  into  an  application 
development  project — not  only 
executable  components) 

■  A  searchable  catalog  of  those  artifacts 

■  Personnel  who  assist  users  and  main¬ 
tain  and  enhance  the  inventory  and 
catalog 


■  A  methodology — a  structured  process 
that  specifies  when  and  how  reuse  poten¬ 
tial  is  acted  upon  during  the  analysis,  de¬ 
sign  and  construction  of  an  application 

■  A  measurement  program  that  tracks 
reuse  and  adherence  to  the  methodology 

■  Design  standards  that  specify  how 
reusable  artifacts  are  to  be  constructed 

■  A  quality-assurance  program  that  guar¬ 
antees  the  technical  and  functional  quality 
of  the  catalog  and  reusable  inventory 

■  Incentive  systems  that  encourage  in¬ 
dividuals  and  teams  to  support  reuse 

Calculating  ROI 

For  a  midsize  to  large  application  devel¬ 
opment  organization  (that  is,  a  shop 
with  100  to  500  developers)  that  already 
has  a  reuse  methodology,  the  first-year 
cost  of  a  reuse  program  may  range  from 
$535,000  to  $1.15  million,  depending 
on  the  approach  to  catalog  implemen¬ 
tation  and  incentives  (see  “What  Does 
It  Cost?”  this  page).  Subsequent  annual 
expenditures  will  range  from  $485,000 
to  $795,000,  not  including  costs  for 
analysis  and  identification  of  reuse 
opportunities  within  the  development 
life  cycle.  The  cost  of  such  activities  will 
vary  with  the  complexity  of  the  project. 
Therefore,  to  be  even  minimally  prof¬ 


itable,  a  reuse  program  for  a  midsize  to 
large  organization  must  return  well  over 
half  a  million  dollars  per  year. 

Although  it  takes  some  doing,  the 
return  on  investment  can  be  calculated. 
Assuming  a  developer  is  paid  $75,000, 
a  company’s  reuse  program  must  offset 
the  full-time  efforts  of  seven  developers 
or,  in  a  shop  with  100  developers,  yield 
a  7  percent  productivity  improvement  to 
achieve  the  minimum  required  return  of 
$500,000.  Based  on  Gartner  Group 
estimates  that  consistent  use  of  a  reuse 
methodology  increases  application 
development  productivity  by  30  percent, 
it  is  reasonable  to  predict  that  a  reuse 
program  that  includes  all  required  ele¬ 
ments  will  produce  an  ongoing  annual 
ROI  equal  to  or  greater  than  200  per¬ 
cent  within  two  years  for  a  shop  with 
100  developers. 

Because  methodology  enhances  the 
value  of  architecture,  its  acquisition,  devel¬ 
opment  and  implementation  are  essential 
to  software  reuse  and  to  the  success  of  the 
information  system  architecture.  The 
application  development  organization 
that  has  no  consistently  followed  method¬ 
ology  is  well  advised  to  obtain  one  even  if 
it  does  not  intend  to  focus  on  reuse.  We 
estimate  the  cost  of  methodology  acqui¬ 
sition  and  implementation  to  range  from 
$250,000  to  $800,000  over  a  three-year 
period  for  a  midsize  to  large  organization. 
Therefore,  an  organization  undertaking  a 
reuse  program  and  installing  a  new 
methodology  may  spend  well  over  $1 .25 
million  within  two  years  to  establish  both. 

Application  development  organiza¬ 
tions  (especially  larger  ones,  for  which 
any  enterprisewide  initiative  takes  sig¬ 
nificant  levels  of  planning,  execution  and 
follow-through)  that  seek  improvements 
in  delivery  and  quality  through  reuse 
should  take  notice  of  the  important  links 
between  architecture,  methodology  and 
reuse,  and  act  accordingly.  Ensuring 
cooperation  and  coordination  among 
the  teams  pursuing  those  initiatives  max¬ 
imizes  overall  reuse  and  the  advantages 
of  the  architecture,  with  a  significant 
combined  payback.  EUs] 

Richard  Hunter,  research  director  of 
Gartner  Group’s  Applications  Devel¬ 
opment  and  Management  Strategies 
service,  can  he  reached  at  richard. 
hunter@gartner.com  or  203  316-1255. 


What  Does  It  Cost? 

The  first-year  investment  in  a  software  reuse  program  will  vary  depending  upon 
catalog  implementation  expenses  and  personnel  incentives 


REQUIRED  ELEMENT 

LOW  COST1 

HIGH  COST 2 

Catalog  creation 

Building  a  usable  accessible  inventory 

$50,000 

$350,000 

Catalog  enhancement  and  maintenance 

Usually  20  percent  of  acquisition  cost 

10,000 

70,000 

Personnel 

Initially  three  full-time  equivalents  (with  benefits) 3 

225,000 

225,000 

Performance  incentives 

20  to  30  percent  of  base  pay  for  contributing  developers 

250,000 

500,000 

Totals 

$535,000 

$1,145,000 

1  THE  LOW  END  ASSUMES  A  SIMPLE  IN-HOUSE  CONSTRUCTION  OF  THE  CATALOG  DATABASE  AND  OPERATOR  INTERFACE. 

2  HIGH-END  COMMERCIALLY  AVAILABLE  CATALOG  REPOSITORIES  CAN  COST  MORE  THAN  $300,000  FOR 
PRODUCT  PURCHASE  ALONE. 

3  EVENTUALLY  1  TO  4  PERCENT  OF  PERSONNEL  ARE  NEEDED. 

SOURCE:  GARTNER  GROUP  INC. 
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How  healthy  is  your  software?  To  find  out,  get  our  free  Software  Health  Check. 


In  todays  networked  world,  the  health  of  your  business  relies  on  software.  Yet  how'  can  you  be  sure  the  choices 
you  make  today  will  be  right  for  your  changing  needs?  Call  1  800  627-2938,  code  ZXP6D002  or  stop  by 
w  ww.software.ihm.coin/is/enterprise/  for  a  free  customized  report  prepared  by  RONIN  Corporation,  a 
worldwide  IT  research  and  consulting  firm.  Based  on  your  input,  it  will  show  how  your  current  environment 
compares  with  your  industry’s  best  practices  and  where  to  concentrate  your  efforts.  So  you  can  keep  your 
business  operating  at  peak  condition.  Now7,  we  promise,  this  won’t  hurt  a  bit... 


The  IBM  home  page  is  located  at  www  ibm.com.  IBM  is  a  registered  trademark  and  Solutions  tor  a  small  planet 
is  a  trademark  of  International  Business  Machines  Corporation.  ©  1997  IBM  Corp.  All  rights  reserved. 


Solutions  for  a  small  planet  " 


All  SAP  references  herein  are  the  registered  or  unregistered  trademarks  of  SAP  AG.  01997  SAP  America,  Inc. 


We  don’t  just  make  better  software.  We  make  better  companies. 


We  do  that  by  giving  you  a  better  return  on  information.  A  better  return  on 
information  means  meeting  customers’  needs  faster.  It  means  making  the  most  of 
changes  in  the  marketplace.  It  means  increased  revenues,  profits  and  growth 
opportunities.  A  better  return  on  information  means  different  things 
to  different  companies.  But  it  always  means  a  better  company. 

And,  so  far,  SAP  has  helped  nearly  7,000  companies 
in  50  countries  become  just  that.  To  find  out 

what  a  better  return  on  information 

can  do  for  you,  visit  us  at  http:/ / 
www.sap.com  or  call 

1-800-283- 

1  SAP. 
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INTRODUCTION 


More  Lives 
Than  a  Cat 


IS  shops  that  institute 
component-based 
software  development 
reduce  failure, 
embrace  efficiency 
and  augment  the 
bottom  line. 
You’d  think 
it  would  be 
easier  to 
persuade  people 
to  try  it. 


What  You'll  Learn 


This  report  explores  the  benefits  and  challenges 

of  facilitating  software  reuse  through  com¬ 
ponent-based  development. 

Gartner  View:  Once  Is  Not  Enough  . 28 

►  The  costs  of  implementing  a  software 
reuse  program 

Avoiding  the  Point  of  No  Reuse . 38 

►  How  component-based  development 
advances  corporate  goals 

►  Obstacles  to  CBD  success  and  strategies 
to  overcome  them 

Bits  and  Pieces . 56 

►  The  technology  of  software  reuse 

Component-Speak:  A  Glossary . 58 

►  How  to  explain  reuse  technology  to 
senior  management 

Software  Reuse  Resource  Center 

►  For  links  to  component  sources,  papers  on 
the  subject,  and  recommended  books  and 
resources,  visit  www.cio.com/CIO/rc_cbd.html 
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ILLUSTRATION  BY  GORCX3N  STUDER 


reuse 


It's  not  too  late 


to  start  designing 
software  for 
reusability, 
but  it's  not 
too  early,  either. 


\V7s~\t  tt  r^v  you  be  the  first  passenger  on  an 
VyK^JU  -L/-D  airliner  whose  parts  have  just 
come  out  of  the  R&D  shop?  Or  would  you  prefer 
to  board  knowing  the  aircraft  was  designed  and 
constructed  with  parts  that  have  successfully  kept 
planes  airborne  for  years?  Practicing  engineers, 
whether  they  specialize  in  civil,  mechanical,  electri¬ 
cal  or  aerospace  engineering,  select  from 
components  whose  characteristics  have 
been  tested  and  proven  for  safety  and 
efficiency.  Reusability  is  a  fundamental 
principle  of  engineering. 

By  the  turn  of  the  century,  observers 
predict,  most  application  software  will  be 
built  of  reusable  components.  Compo¬ 
nent  libraries  will  be  considered  impor¬ 
tant  corporate  assets.  Development  speed 
and  quality  will  increase;  time-to-market 
and  maintenance  costs  will  shrink  dra¬ 
matically.  As  career  moves  go,  restruc¬ 
turing  the  IS  shop  for  component-based 
development  (CBD)  looks  like  a  sure  win¬ 
ner.  CBD  is  a  technique  by  which  appli¬ 
cations  are  built  from  software  modules 
designed  for  reuse.  Modules  can  be  sub¬ 
routines,  smaller  applications  or  objects, 
which  are  packets  of  code  that  contain  data  and 
methods  for  manipulating  that  data. 

It’s  not  too  late  to  start  designing  software  for 
reusability,  but  it’s  not  too  early,  either.  The  best  news 
is  this:  Reusability  hurdles  are  mainly  cultural,  not 
technological.  Overcoming  challenges  to  adoption 
is  a  matter  of  changing  minds,  not  spending  huge 
sums  of  money.  But  most  software  developers  have 
yet  to  take  advantage  of  reusability.  In  most  IS  orga¬ 
nizations,  every  project  is  still  considered  a  whole 
new  ballgame.  The  software  developer  who  search¬ 
es  through  code  libraries  for  macros  and  subroutines 
that  might  be  adapted  for  the  project  at  hand  is  rare. 
Although  Paul  G.  Bassett,  senior  vice  president  of 
research  and  one  of  the  founders  of  Netron  Inc.,  a 
software  development  tool  vendor  in  Toronto,  offers 
an  optimistic  estimate  of  current  software  reuse — 
30  percent  to  50  percent — CIOs  queried  for  this  arti¬ 
cle  set  that  figure  about  10  percentage  points  lower. 
And  it’s  probably  no  coincidence  that  some  CIOs 
peg  the  failure  rate  for  all  software  projects  at  60  per¬ 
cent;  in  fact,  25  percent  never  get  delivered,  says 
Charles  B.  Kreitzberg,  president  of  Cognetics  Corp., 
a  software  design  and  consulting  firm  in  Princeton 
Junction,  N.J.  The  rest,  he  says,  come  in  late,  over 
budget  or  both. 

Component-based  development  will  change 
that — and  soon.  CIOs  who  plan  to  retire  or  change 
careers  within  a  year  or  two  can  safely  ignore  this 
advance  in  software  creation  technique,  but  others 
had  better  pay  attention,  unless  they  want  to  be 
blindsided  by  an  outsourcer  who  offers  to  take  over 
software  development  at  a  fraction  of  the  cost,  says 


Brian  Morrow,  director  of  CBD  at  Plano,  Texas- 
based  Texas  Instruments  Inc. 

Of  course,  there  will  be  initial  investments  in 
education  and  training  (see  “Once  Is  Not  Enough,” 
Page  28).  Although  components  built  with  reuse  in 
mind  cost  more  at  the  outset,  their  cost  drops  dra¬ 
matically  when  they  are  reused  in  subsequent  pro¬ 
jects.  Some  ready-made  components  can  be  pur¬ 
chased  and  reused,  and  more  are  expected.  “A  mar¬ 
ket  is  emerging  in  readily  available  functionality 
that  is  dramatically  cheaper  than  building  it  your¬ 
self,”  Morrow  says.  “Today  we  see  the  off-the-shelf 
components  selling  at  between  one-third  and  one- 
fifth  the  cost  of  developing  your  own.”  He  predicts 
that  ready-to-use  component  costs  will  drop  to  one- 
tenth  that  of  home-grown  modules  over  the  next 
three  years.  By  2001,  there  will  be  a  $7  billion  com- 
ponentware  market,  with  about  $2  billion  in  soft¬ 
ware  and  the  rest  in  services,  says  Mike  Blechar, 
research  director  of  Gartner  Group  Inc.’s  applica¬ 
tion  development  service  in  Stamford,  Conn. 

Savings  aside,  IS  executives  already  involved  in 
reusability  projects  cite  a  variety  of  benefits.  At 
General  Accident  Insurance  in  Philadelphia,  reusable 
components  provide  a  uniform  way  of  doing  busi¬ 
ness  across  the  company’s  insurance  lines,  and  main¬ 
tenance  costs  are  expected  to  decline.  In  addition, 
one  of  North  America’s  largest  grocery  companies 
is  counting  on  CBD  to  help  eliminate  dependence  on 
the  mainframe  (see  “Avoiding  the  Point  of  No 
Reuse,”  Page  38).  Though  the  advantages  are  many, 
Netron’s  Bassett  cautions  against  seeing  reuse  as  a 
goal  in  itself.  “It  is  merely  a  means  to  many  other 
more  important  ends  that  have  bottom-line  impli¬ 
cations — things  that  are  really  important,  such  as 
improvements  in  quality  and  flexibility,  and  the 
reduction  of  complexity  and  time-to-market,”  he 
says.  “There  is  value  both  to  the  end  user  and  the 
workings  of  the  IS  environment.  Reuse  is  a  gateway 
to  those  kinds  of  bottom-line  issues.” 

Bassett  suggests  that  CBD  is  appropriate  only  at 
companies  in  which  software  is  seen  as  a  strategic 
weapon  and  not  just  a  back-office  function.  “The 
answer  to  the  question  of  appropriateness  [for  a 
company]  is  highly  correlated  with  how  long  you 
could  stay  in  business  if  your  IT  function  was  sud¬ 
denly  disabled,”  he  says.  “[This  question]  focuses 
attention  on  the  real  business  issues,”  he  adds. 
Companies  that  can  survive  without  information 
technology  for  months  or  years  can  probably  ignore 
the  CBD  strategy. 

The  journey  to  component-based  development  is 
not  easy,  says  Wayne  Ratz,  vice  president  of  applica¬ 
tion  systems  at  General  Accident  Insurance.  “But  it’s 
one  that  everyone  in  IS  is  going  to  have  to  make  over 
the  next  few  years.  It’s  absolutely  where  things  are 
going,”  he  says.  “If  you  can’t  make  the  change,  you 
aren’t  going  to  be  able  to  support  the  business.” 

-Miryam  Williamson,  Contributing  Editor 
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encore  datashare:  the  enterprise 

BACKUP  SOLUTION. 

You  know  how  valuable  your  corporate  information  is.  Are  you  protecting  all  of  it? 


In  the  past,  your  biggest  worry  was  backing  up  the 
mainframe.  But  now,  your  corporate  information  is  on  a 
multitude  of  platforms.  It’s  on  mainframes,  it’s  on  open 
systems,  it’s  on  network  servers,  it’s  even  on  desktops. 
And  you’re  faced  with  the  challenge  of  protecting  it. 

All  of  it. 

You’re  not  worried  about  your  mainframe  data,  it’s  always 
secure,  protected  by  proven,  reliable  backup  utilities  and 
disciplines.  But  your  open  systems  and  network  servers 
don’t  share  the  same  security.  What  if  they  could? 

TM 

With  Encore’s  Infinity  SP  Universal  Storage  Processor 

TM 

and  DataShare,  they  can.  The  Infinity  SP  provides 


centralized  storage  for  your  information.  And  DataShare 
facilitates  mainframe-based  backups  of  all  of  your  data  — 
mainframe,  open  systems,  and  network  servers.  All  of 
your  corporate  information  can  now  be  safeguarded 
against  disaster  using  established,  robust  mainframe  tools 
and  procedures  —  tools  and  procedures  you’ve  always 
relied  on.  All  of  your  information.  The  information  you 
can’t  afford  to  lose. 

Protect  all  of  your  corporate  data. 

Call  Encore  at  1-800-933-6267. 


ENCORE 


COMPUTER  CORPORATION 
www.encorc.com 


Data  On  Demand 
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For  Tom  van  Turnnout, 

who  insisted  on  reusability 
at  Chelsey  Corp.,  the  move 
to  component-based 
development  wasn  't  a 
quantum  leap.  But  many 
CIOs  find  the  cultural 
barriers  a  challenge  to 


overcome 
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CULTURAL  ISSUES 


The  advantages  of  component-based  development 
seem  so  darn  obvious,  it’s  a  wonder  everyone 
isn't  doing  it.  But  CIOs  who've  been  there  say 
reaping  the  benefits  of  software  reuse  hinges  on 
overcoming  a  bevy  of  cultural  barriers. 

BY  MIRYAM  WILLIAMSON 


Every 


CIO’s  worst  nightmare  came  true  for  an  IS  executive 
we’ll  call  Oscar  Foley  in  the  summer  of  1993  when  a 
power  plant  operator’s  error  blew  out  his  company’s  mainframe.  “Our  computers  were 
powered  by  diesel  engines  on  flatbed  trucks  for  eight  weeks,”  says  Foley,  director  of 
systems  and  technology  planning  at  one  of  North  America’s  largest  grocery  compa¬ 
nies.  “We  were  close  to  being  down  and  out.”  At  that  point,  he  vowed  “to  get  rid  of 
the  corporate  mainframe  so  there  [would]  never  again  be  a  single  point  of  failure.” 

The  move  to  distributed  computing  meant  a  major  redesign  of  the  company’s  prod¬ 
uct  database  and  core  applications,  an  effort  that  took  more  than  two  years.  Foley  saw 
the  massive  project  as  an  opportunity  to  tighten  the  IS  organization’s  development  stan¬ 
dards  and  institute  the  practice  of  component-based  development  (CBD).  Foley,  the 


company’s  technical  architect  for  more  than  20  years, 
set  out  to  reorganize  his  50-member  systems  devel¬ 
opment  team  and  ran  into  a  wall  of  overt  resistance. 
“There  was  a  lot  of  low-level  grumbling  in  meetings,” 
he  recalls.  Although  it  took  a  while  to  decipher  what 
the  developers  were  really  saying,  Foley  realized  they 
resented  giving  up  control  of  their  projects — not  to 
mention  the  steep  learning  curve  of  reuse  technology. 
“They  just  didn’t  buy  into  the  whole  concept  of 
reusable  components,”  he  says. 

To  make  matters  worse,  executive  management 


Rethinking  Methodology 

To  get  the  most  out  of  reuse,  CIOs  must 
reconsider  the  development  process 


Perhaps  the  most  dif¬ 
ficult  cultural  aspect  of 
component-based  devel¬ 
opment  (CBD)  is  that  it  re¬ 
quires  organizations  to  adopt 
an  entirely  new  development 
process.  Most  IS  shops  use  a 
form  of  the  rapid  application 
development  (RAD)  technique 
pioneered  at  E.I.  duPont  de 
Nemours  and  Co.  in  the  late 
1980s  for  building  small  de¬ 
partmental  systems,  and  the 
conventional  waterfall  metho¬ 
dology  for  enterprise  systems. 
RAD  typically  involves  proj¬ 
ects  of  short  duration — usual¬ 
ly  three  months  or  less — with 
deliverables  of  strictly  limited 
function  at  the  end  of  each 
phase.  The  waterfall  method 
consists  of  a  sequence  of  steps, 
usually  defined  as  analysis,  de¬ 
sign,  coding,  testing  and  de¬ 
ployment.  In  this  method,  the 
work  in  one  phase  stops  when 
the  next  phase  begins;  for  ex¬ 
ample,  the  system’s  design  is 
not  altered  once  coding  starts 
and  testing  waits  until  coding 
is  done.  Often  that  sequence  is 
violated  because  it 
actually  hampers 
development 


'  " 


and  results  in  delivery  of  al¬ 
ready  obsolete  systems.  Some 
observers  say  the  shop  that 
claims  to  use  the  waterfall 
methodology  actually  has  no 
methodology  at  all. 

The  right  methodology  for 
CBD,  says  Gary  Lord,  partner 
responsible  for  the  client/server 
solutions  practice  at  KPMG 
Peat  Marwick  LLP  in  Palo  Alto, 
Calif.,  is  “an  iterative  appli¬ 
cation  development  meth¬ 
odology”  in  which  users  try  out 
and  critique  portions  of  the 
application  before  the  entire 
system  is  complete  and  devel¬ 
opers  make  changes  in  an  iter¬ 
ative  fashion.  A  great  deal  more 
interaction  between  developers 
and  users  generally  results.  The 
downside  is  that  developers 
may  feel  criticized  and  frus¬ 
trated,  a  fact  that  management 
must  consider  and  ameliorate. 

-M.  Williamson 


had  brought  in  a  consulting  company  to  do  a  proof 
of  concept — without  telling  Foley.  By  the  time  he 
figured  out  what  the  consultants  were  up  to,  they 
were  arguing  against  the  component-based  devel¬ 
opment  approach,  calling  it  too  risky.  Foley  reasons 
that  the  consultants  saw  no  benefit  for  them  in 
CBD,  because  they  knew  they  might  not  be  around 
to  reap  the  rewards  of  reuse. 

Even  after  the  proof-of-concept  project  ended 
successfully  in  May  1996,  resistance  to  CBD  con¬ 
tinued.  In  July,  Foley  confronted  consultants  and 
staff.  “I  told  them  we  had  proven  that  the  technol¬ 
ogy  worked  and  that  if  they  weren’t  going  to  accept 
the  reusable-component  approach,  we  just 
wouldn’t  bother  building  the  project.  Instead,  we’d 
go  out  and  buy  an  application,”  he  says.  The  threat 
of  organizational  embarrassment  worked  where 
consensus  building  had  failed. 

A  working  prototype  that  did  everything  but 
populate  the  database  was  in  users’  hands  in 
September  1996.  The  system  is  slated  to  be  rolled 
out  by  the  end  of  March  1 997,  and  two  more  CBD 
projects  are  underway.  Foley  says  he  expects  com¬ 
ponent-based  development  to  yield  a  30  percent 


"With  CBD,  we  are  trying  to 
raise  plagiarism  to  a  science, 
to  make  it  systematic." 

-Paul  Bassett 


productivity  gain  and  estimates  that  about  40  per¬ 
cent  of  the  components  built  for  the  first  project 
could  be  reused  in  the  other  two. 

The  ability  to  reuse  components  is  arguably  the 
most  important  goal  of  component-based  devel¬ 
opment,  a  software  engineering  technique  in  which 
modules  are  built  in  ways  that  permit  them  to  be 
used  repeatedly,  often  with  modest  refinements 
from  one  project  to  the  next  and  occasionally  in  the 
same  form.  CBD  represents  a  step  toward  maturity 
of  the  software  development  process,  but  as  Foley 
discovered,  taking  that  step  can  be  difficult.  Unlike 
many  other  advances  in  technology,  the  main  bar¬ 
riers  to  embracing  CBD  are  social  and  cultural,  not 
technical  and  financial.  Attitudes,  not  a  lack  of  dol¬ 
lars,  stand  in  the  way. 

SELLING  CBD  INTERNALLY 

Though  it  cuts  costs,  improves  quality  and 
speeds  the  development  process,  CBD  is  a 
tough  sell  in  many  IS  shops,  subject  to 
biases  and  preconceptions  that  CIOs  must  work  to 


40  CIO  /  MARCH  1,  1997 


http://www.cio.com 


Andrew  Anker, 

CEO,  HotWired,  Inc. 


To  create  one  of 
the  most  dynamic 
Web  sites,  HotWired 
clicked  on  Sybase. 


There  are  cool  places  on  the  Internet.  And  then 


there  are  truly  hot  ones -like  the  HotWired1 


Network  (vvwvv.  hotwired.com) ,  serving  over  two 


million  page  views  every  day.  What  helps  HotWired  generate  all  this  heat?  Sybase?  We  provide  the  database  and  Internet 


solutions  that  run  their  site  end-to-end.  We  make  it  dynamic.  Personalized. 


Different  every  time  you  see  it.  We  even  help  track  visitors’  browsing  habits,  so  content  is  automatically  updated  with 
each  visit.  Which  is  why  more  of  the  top  Internet  sites  run  on  Sybase  than  any  other  solution.  For  a  more  in-depth  look 


at  what  we’ve  done  for  HotWired,  visit  www.sybase.com/hotvvired.  Or  call 
us  at  1-800-8-SYBASE.  It’s  where  the  most  dynamic  Web  sites  begin.  www.sybase.com 
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Half  the  world  relies  on  our 
data  warehouses. 

If  you’re  serious  about  using  data  warehousing  to  gain  a 
competitive  edge,  choose  NCR.  The  company  that  is  recognized 
worldwide  as  the  industry  leader.  We  have  the  technology  and 
expertise  to  help  you  transform  mountains  of  data  into  nuggets 

of  vital  customer  information,  enabling 
smarter,  quicker  decisions. 

Our  NCR  Teradata®  database  is 
the  most  proven  and  robust  parallel 
database  engine  in  the  industry, 
providing  you  with  unmatched  querying  power  and  scaling 
from  a  few  gigabytes  to  10  terabytes  and  beyond. 

And  our  NCRWorldMark "  servers  are  the  best  platform  to 
build  your  data  warehouse  on.  Ours  is  the  only  server  platform 
that  scales  from  SMb  to  clusters,  to  MPI?  allowing  businesses  to 
start  their  data  warehouse  small  and  grow  it  to  any  size. 

In  the  U.S.,  the  3  biggest  retailers,  2  out  of  3  top  banks, 

3  out  of  5  top  airlines,  and  7  of  the  top  9  telecommunications 
companies,  are  already  utilizing  our  know-how.  Know-how  that 
has  made  us  the  world  leader  in  data  warehousing  with  over 
500  production  data  warehouses.  Know-how  that  can  be  a  big 
plus  in  your  race  to  beat  the  competition. 

NCR  Worldwide  Services  professionals  can  help  you 
set  up  and  maintain  the  most  scalable  data  warehouse  on 
the  planet. 

For  more  information  about 
NCR’s  scalable  data  warehouse, 
call  1  800  CALL-NCR,  ext.  3000. 

Or  visit  us  on  the  web  at 
www.ncr.com. 
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AlokChaturvedi 

advocates  rewarding 
developers  for 
reusing  components 
— as  well  as  paying 
royalties  to 
components '  authors. 


overcome.  For  one  thing,  using  code  that  someone 
else  has  written  seems  to  many  a  form  of  plagia¬ 
rism.  We  have  all  been  taught  since  kindergarten 


that  each  person  must  do  his  or  her  own  work. 
“IWith  CBD,]  we  are  trying  to  raise  plagiarism  to 
a  science,  to  make  it  systematic,”  says  Paul  G. 
Bassett,  senior  vice  president  of  research  and  one 
of  the  founders  of  Netron  Inc.,  a  Toronto-based 
provider  of  component  technology.  Managers  must 
meet  that  objection  head-on,  first  identifying  and 
then  negating  it. 

Then  there’s  the  not-invented-here  syndrome. 
“We  don’t  respect  the  way  other  people  do  things 
as  much  as  we  respect  our  own  way,”  Bassett 
explains.  With  care  and  patience,  CIOs  can  create 
an  atmosphere  in  which  developers  learn  to  trust 
each  other’s  programming  and  share  what  they 
have  built.  Fear  of  change — and  more  to  the  point, 
fear  of  failure — are  common  human  traits.  In  a  cor¬ 
porate  culture  in  which  people  are  punished  for 
mistakes  rather  than  urged  to  learn  from  them, 
aversion  to  risk  results.  It  takes  a  brave  manager  to 
diagnose  that  problem,  and  even  where  risk  taking 


is  encouraged,  as  it  is  at  Foley’s  company,  problems 
can  arise.  “About  a  third  of  the  way  down  our  list 
of  operating  principles  is  the  statement  that  we  must 
take  risks  to  succeed,”  says  Foley. 
Still,  he  had  to  threaten  to  acquire  the 
application  from  an  outside  source 
before  his  people  were  willing  to  risk 
doing  things  another  way. 

In  addition  to  dealing  with  devel¬ 
opers’  attitudes,  CIOs  must  concern 
themselves  with  the  perceptions  and 
intentions  of  their  middle  managers. 
“Like  it  or  not,”  Bassett  says,  “man¬ 
agers  represent  the  status  quo.  If 
you’re  trying  to  introduce  a  new  way 
of  doing  things,  which  reuse  normally 
is,  then  management  becomes  one  of 
the  problems.”  It’s  simply  human 
nature  to  manage  for  one’s  own  com¬ 
fort.  “Project  managers  in  particular 
are  apt  to  veto  anything  that  is  not  on 
their  perceived  critical  path,”  Bassett 
adds.  “If  they  are  not  familiar  with 
the  concepts  and  advantages  of  reuse, 
it  will  be  perceived  as  a  distraction 
from  getting  the  work  done.” 


FINDING  COMMON  GROUND 
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)eyond  paving  the  way  for  CBD 
acceptance  within  IS,  CIOs 
must  also  watch  out  for  evi¬ 
dence  of  interdepartmental  friction. 
It  isn’t  unusual  for  distinct  depart¬ 
ments  and  business  units  to  have 
their  own  vocabularies,  values  and 
ways  of  doing  things.  Many  compa¬ 
nies  allow  and  even  encourage  dif¬ 
ferent  parts  of  the  enterprise  to  work 
as  individual  units — even  to  the  point  of  competi¬ 
tion.  “They  don’t  talk  to  each  other,  don’t  trust 
each  other,  don’t  share  standards  and  don’t  coop- 


ill  a  mature  CBD  environment, 
only  about  5  percent  of  a  business 
unit's  applications — the  portion 
that  applies  business  rules — 
is  likely  to  be  unique. 

erate,”  says  Bassett.  “This  adds  to  inefficiency  in 
the  business  and  lack  of  agility  in  the  marketplace.” 
Senior  management’s  challenge  is  to  find  a  bal- 
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It  was  supposed  to 
be  the  launch  of  a 
development  project ... 
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It's  more  than 
a  development 
product.  It's  a 
complete  solution 
put  complex 
terprise  applications 
into  production  — 
from  legacy  to 
client/server  to  the 
Internet.  Ask 
any  of  our  3,000 
worldwide  customers. 


For  a  white  paper  on 
creating  enterprise 
systems  for  the 
Internet,  call  us. 
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1-800-365-3608 

unifaceJnfo@compuware.com 


% 


PROFILE:  General  Accident  Insurance 


It’s  No  Accident 

Thanks  to  component-based  development,  General  Accident  Insurance  developers 
can  be  counted  on  to  deliver  new  systems  in  a  fraction  of  the  time  it  once  took 


It  took  four  tries  to  build  a  reusable 
rating  engine  that  can  accept  different 
algorithms  for  different  policies,  but 
the  entire  effort  took  less  than  a  year. 


At  General  Accident  In¬ 
surance  in  Philadelphia,  plans 
are  underway  to  bring  dis¬ 
tributed  data  and  application  logic 
back  to  a  central  host.  The  goal  is  to 
have  the  same  data  available  to  all  28 
branch  offices  and  approximately 
4,000  independent  agents  in  the 
United  States,  says  Wayne  Ratz,  vice 


ferent  policies,  but  Ratz  has  no 
regrets.  The  entire  effort  took  less 
than  a  year. 

Bussewitz  had  no  problem  getting 
volunteers  for  the  initial  CBD  proj¬ 
ect,  but  even  so,  the  learning  process 
was  not  painless.  “They  were  used  to 
being  senior  programmers  and 
knowing  everything,”  she  says.  “The 
need  to  learn  new  tools  and  methods 
made  them  feel  junior  again.  We  just 
kept  letting  them  know  it  was  OK  to 
make  mistakes,  that  that’s  the  way  to 
learn.”  What’s  more,  because  devel¬ 
opers  take  their  work  very  seriously, 
the  project  team  had  difficulty  com¬ 
ing  to  terms  with  the  necessity  of 
rework,  Bussewitz  recalls.  During  the 
trying  times,  her  main  concern  was 
keeping  people  focused  on  the  goal, 
their  minds  open  to  critiques  from 
the  agents  who  were  the  ultimate 
users.  “It  was  hard  for  the  develop¬ 
ers  to  go  through  that,  but  what  we 
have  now  makes  it  worthwhile,”  she 
says.  “Everyone  is  really  proud  of  it.” 

-M.  Williamson 


president  of  application  systems.  As 
product  offerings  change  and  new 
products  are  introduced,  everyone 
who  represents  the  company  to  its 
customers  will  have  the  information 
at  the  same  time. 

A  55-member  staff  is  replacing  the 
company’s  legacy  systems  with  client/ 
server  applications, 


process  of  rewriting  and  recen¬ 
tralizing  the  systems.  A  commer¬ 
cial  auto  system  is  slated  for  installa¬ 
tion  in  early  1997. 

Reusability  and  component-based 
technology  are  key  to  the  effort.  Ratz 
estimates  that  CBD  enables  his  orga¬ 
nization  to  deliver  systems  three  to  four 
times  faster  than  was  possible 
with  applications  written  in 
Cobol.  The  project’s  keystone 
is  a  reusable  rating  engine, 
says  Kay  Bussewitz,  assistant 
vice  president  of  system 
development.  But  reusability 
was  not  a  primary  objective 
at  first.  Traditionally,  Ratz 
explains,  every  time  the  com¬ 
pany  introduced  a  new  prod¬ 
uct,  developers  would  build 
a  new  rating  module.  “We 
never  reused  anything  from 
before,”  he  says.  “We  might 
reuse  the  theory  and  con¬ 
cepts  but  never  the  code.” 

It  took  four  tries  to 
build  a  reusable  rating 
engine  that  can  accept  dif¬ 
ferent  algorithms  for  dif- 


one  line  of  business  at  a  time.  The 
user  interface  and  some  process¬ 
ing  capability  will  remain  on 
client  machines  while  a  central 
server  holds  the  rules  for  process¬ 
ing  each  insurance  policy.  A 
small-business  policy  application 
called  BusinessElite  was  com¬ 
pleted  in  1 995,  a  year  into  the 


PHOTOS  BY  STEVE  WEINHEBE 


ance  between  diversity  and  similarity,  a  key  issue  in 
component-based  development.  Bassett  believes 
that  balance  can  favor  what  business  units  have  in 
common.  “Rather  than  having  to  manage  by  con¬ 
sensus  and  give  up  economies  of  scale,  one  can 
recapture  the  coherence  and  control  that  comes 
with  commonality,”  he  says.  Where  segments  of  the 
enterprise  see  themselves  as  unique,  they  are  likely 
to  object  to  applications  that  incorporate  compo¬ 
nents  built  for  other  units.  For  example,  Bassett 
says,  people  in  manufacturing  differentiate  among 
sales  orders,  purchase  orders  and  work  orders. 
They  expect  different  systems  to  handle  those  dif¬ 
ferent  parts  of  the  business.  “But  under  the  surface, 
orders  are  orders,”  he  says.  With  CBD,  it  is  possi¬ 
ble  to  create  a  common  structure  that  fulfills  at  least 
80  percent  of  functionality  for  those  three  types  of 
order  systems;  their  diversity  can  be  supported  by 
the  other  20  percent.  Not  only  does  that  greatly 
decrease  construction  time,  it  minimizes  coding 
errors  and  maintenance  costs  as  well  because  devel¬ 
opers  are  building  on  components  that  already  have 
been  tested.  In  fact,  Bassett  says,  in  a  mature  CBD 
environment,  only  about  5  percent  of  a  business 
unit’s  applications — the  portion  that  applies  busi¬ 
ness  rules — is  likely  to  be  unique. 

MEASUREMENTS  AND  REWARDS 

ithout  a  system  of  measurements,  how¬ 
ever,  such  improvements  may  go  unno¬ 
ticed — and  unrewarded.  Because  profes¬ 
sionals  don’t  like  to  be  measured,  surprisingly  few 
IS  organizations  have  accurately  assessed  their  cur¬ 
rent  performance.  “When  you  keep  score,  most 
people  think  of  a  zero-sum  game,  as  in  sports, 
where  there’s  always  a  winner  and  a  loser,”  says 
Bassett.  Senior  management  must  address  that  atti¬ 
tude  directly  by  instituting  a  system  that  measures 
the  process  and  teams,  not  individual  developers. 

One  metric  Bassett  recommends  involves  count¬ 
ing  the  number  of  times  a  component  is  reused.  But 
he’s  quick  to  point  out  that  a  component  doesn’t 
have  to  be  reused  without  modification  to  be  count¬ 
ed.  He  maintains  that  components  should  be  built 
with  reusability  in  mind.  The  confusion  between 
using  a  component  repeatedly  without  change — 
graphical  user  interface  components  are  a  good 
example — and  designing  components  that  can  be 
modified  slightly  from  one  application  to  another 
is  “the  primary  conceptual  problem  of  CBD,”  says 
Bassett.  To  encourage  component  reuse  as  well  as 
designing  for  reusability,  Bassett  recommends  a  sys¬ 
tem  of  monetary  rewards  based  on  the  number  of 
modules  a  team  reuses  rather  than  rewarding  devel¬ 
opers  for  writing  new  code. 

A  variation  on  that  theme,  proposed  by  Alok  R. 
Chaturvedi,  associate  professor  of  IS  at  Purdue 
University  in  West  Lafayette,  Ind.,  is  to  encourage 


developers  to  build  and  publicize  reusable  compo¬ 
nents,  creating  an  internal  market  for  them  by 
establishing  a  system  of  royalty  payments  to  the 
individual,  team  or  department  who  authors  the 
components — as  well  as  rewarding  those  who  reuse 

"Encouraging  reuse  requires  lots  of  carrots 
and  sticks  in  organizations  where  reuse  is  a 
relatively  new  practice.  But  once  it  becomes 
systematic,  incentives  become  unnecessary — 
it's  just  the  way  things  are  done." 

-Paul  Bassett 


the  components.  In  contrast  with  Bassett’s  rewards 
for  reuse,  Chaturvedi’s  notion  also  rewards  design¬ 
ing  for  reusability.  But  the  two  reward  systems  are 
not  mutually  exclusive.  Chaturvedi  points  out  that 
his  royalty  proposal  “creates  a  powerful  incentive 
to  build  reusable  components,”  citing  his  own 
research  that  shows  that  “even  a  simple  royalty 
scheme  can  alter  behavior  dramatically  and  create 
competition  for  reusability  within  the  organi¬ 
zation.” 

Chaturvedi’s  study  found  that  a  company  offer¬ 
ing  a  5  percent  royalty  to  the  component’s  author 
can  expect  the  library  of  reusable  components  to 
grow  30  percent  faster  than  it  would  with  a  simple 
reward  system.  When  a  15  percent  royalty  is 
offered,  the  library  expands  about  50  percent  faster, 
he  reports.  Because  authors  are  rewarded  only 
when  their  components  are  actually  used,  the  incen¬ 
tive  to  create  really  useful  components  is  strong. 
Bassett  notes  that  “encouraging  reuse  requires  lots 
of  carrots  and  sticks  in  organizations  where  reuse 
is  a  relatively  new  practice.  But  once  it  becomes  sys¬ 
tematic,  incentives  become  unnecessary — it’s  just 
the  way  things  are  done.” 

Making  CBD  work  may  also  require  adjusting 
managers’  incentives.  In  many  organizations,  a 
project  manager’s  status  and  compensation  are 
determined  by  the  size  of  the  staff  he  or  she  over¬ 
sees.  Large  project  teams,  in  which  synchronization 
and  communication  are  inevitably  the  dominant 
issues,  are  a  barrier  to  component-based  develop¬ 
ment.  “If  you  can  somehow  shrink  the  size  of  the 
project  team,  then  that  barrier  goes  away.  With 
reuse,  you  have  the  opportunity  to  dramatically 
reduce  the  team  size,”  says  Bassett.  “But  if  the  proj¬ 
ect  manager’s  bonus  is  based  on  a  percentage  of 
salaries  paid  to  the  team,  where  is  the  incentive  for 
the  manager  to  facilitate  reuse?” 
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PROFILE:  Oracle  Service  Network 

A  Custom  Fit 


Applying  CBD  to  serve  a  wide  range  of  clients  means  designing 
flexible  modules  that  can  be  easily  customized 


IN  HIS  25  YEARS  of  service  at  the  Chelsey  Corp.,  a  private¬ 
ly  owned  Canadian  holding  company  in  London,  Ontario, 
Tom  van  Turnhout  saw  plenty  of  change,  including  the  ad¬ 
vent  of  computers.  “I  started  when  it  was  a  manually  run 
company,”  says  Chelsey ’s  former  vice  president  of  informa¬ 
tion  technology,  who  recently  joined  Toronto-based  St.  Clair 
Interactive  Communications  Inc.  as  a  consultant.  He  presided 
over  the  entire  IS  function,  including  the  Oracle  Service  Net¬ 
work,  a  state-of-the-art  call  center  that  provides  assistance 

"The  payoff  of  CBD  must  be  there  in 
the  long  run.  Once  you  start  reusing 
the  initial  pieces,  there's  got  to  be  this 
humongous  drop  in  the  cost  curve." 

-Tom  van  Turnhout 

around  the  clock  to  customers  of  companies  such  as  au¬ 
tomakers,  insurance  firms  and  financial  institutions.  Calls  to 
the  Oracle  service  center  may  come  from  people  anywhere  in 
the  United  States  or  Canada  needing  roadside,  home,  medical 
or  legal  assistance. 

People  who  call  Oracle  are  in  some  kind  of  trouble  and  thus 
not  apt  to  be  particularly  patient  with  a  voice  on  the  phone  that 
can’t  solve  their  problem  in  a  hurry.  A  customer  liaison  pairs 
the  caller  with  a  local  service  provider,  using  a  GIS-based  sys¬ 
tem  called  the  Provider  Locator  System,  which  taps  into  cus¬ 
tomer  and  provider  profiles  to  find  a  suitable  match.  “The  qual¬ 
ity  of  the  systems  affects  the  delivery  of  the  service,  as  in  every 
other  organization,”  van  Turnhout  says.  “The  difference  is  that 
people  call  because  they  have  a  problem,  and  their  anxiety  level 
is  probably  already  1 1 0  on  a  100-point  scale.” 


The  Oracle  devel¬ 
opment  team,  which 
includes  five  former 
Cobol  programmers 
who  have  also  mas¬ 
tered  4GLs  and 
object  orientation, 
has  three  kinds  of 
customers:  call  cen¬ 
ter  operators,  peo¬ 
ple  who  call  those 
operators  and  the 
companies  that 
contract  with  the 
call  center.  “My 
approach  was 
always  to  design 
software  within 
the  organization  as  though  we  were  selling  the  software 
to  an  external  customer,”  van  Turnhout  says.  Because  he 
always  insisted  on  reusability,  even  of  ancient  Report  Program 
Generator  (RPG)  or  Cobol  modules,  the  move  into  compo¬ 
nent-based  development  was  “not  really  a  quantum  leap.” 

Oracle’s  strategic  vision  calls  for  constantly  expanding  ser¬ 
vice  offerings,  always  custom-fitted  to  a  specific  client  corpo¬ 
ration.  The  real  challenge,  van  Turnhout  says,  was  to  create 
and  test  components  made  of  business  objects  flexible  enough 
to  need  little  modification  from  one  system  to  another.  He  says 
the  difference  in  cost  between  component-based  development 
and  conventional  development  won’t  be  known  for  a  few  more 
months  but  adds,  “the  payoff  must  be  there  in  the  long  run. 
It’s  not  in  the  initial  pieces,  which  are  more  expensive.  But  once 
you  start  reusing  them,  there’s  got  to  be  this  humongous  drop 
in  the  cost  curve.” 


-M.  Williamson 


JOB  SECURITY  CONCERNS 

The  CIO  who  suspects  that  fear  of  layoffs 
may  underlie  resistance  to  CBD  should  make 
it  clear  to  all  concerned  that  smaller  teams 
do  not  necessarily  mean  a  smaller  IS  shop.  Where 
fewer  people  are  needed  to  complete  a  project,  more 
projects  can  be  undertaken  at  the  same  time. 
Currently,  the  head  count  of  in-house  IS  shops  “is 
being  somewhat  reduced  as  corporations  turn  to 
outsourcing.  But  this  is  not  so  much  a  result  of  com¬ 


ponent  use  as  it  is  a  shift  in  the  development  model,” 
says  Charles  B.  Kreitzberg,  president  of  Cognetics 
Corp.,  a  software  design  and  consulting  company 
in  Princeton  Junction,  N.J. 

Although  it’s  wise  to  consider  it  a  possible  hur¬ 
dle  to  acceptance  of  CBD,  job  security  might  never 
concern  developers.  Tom  van  Turnhout,  former  vice 
president  of  IT  for  Chelsey  Corp.  in  London, 
Ontario,  says  fear  of  job  loss  was  widespread  when 
his  company  was  implementing  a  client/server  infra¬ 
structure.  Employees  were  worried  about  their  job 
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Today,  every  flight  is  a  connecting  flight.  Behind  an  airports  passengers  and  cargo  are  endless  streams  of  voices 
and  data  connected  and  moved  by  sophisticated  communications  networks.  Because  we  see  these  high-speed 
networks  as  logical  extensions  of  electronic  connectors,  AMP  plays  an  important  role  in  this  unseen,  but  critical 
process.  You’ll  see  AMP  innovation  in  our  networking  products,  which  include  cabling,  computer  interface 
cards,  hubs,  routers,  switches,  fiber  optics,  and  wireless  components.  Just  as  important,  you’ll  also  see  it  in  the  way 
we  integrate  these  technologies,  to  help  bring  our  customers  greater  connectivity,  higher  bandwidth,  lower  main¬ 
tenance  costs  and  a  longer  usefltl  life  for  their  networks.  You  may  never  think  of  an  airport  as  a  “connector.”  But 
the  networks  that  control  your  city’s  air  traffic,  finances,  and  communications  will  work  better  because  we  do. 


AMP  Incorporated,  Harrisburg,  PA  17105-3608.  Contact  your  regional  center:  USA  1-800-522-6752,  Canada  905-470-4425. 
United  Kingdom  44-1753-676800  Singapore  65-482-031 1  Japan  81-44-813-8502. 


www.amp.com  AMP  and  Connecting  at  a  Higher  level  are  trademarks. 


; 


Gary  Lord  '.Although 

CBD  does  involve  a 
certain  amount  of 


security  because  of  all  the  learning  that  was 
required.  Where  CBD  is  concerned,  “I  haven’t 
found  it  to  be  an  issue,”  he  says.  “The  issue  now  is 
[meeting]  business  needs  and  how  well  the  business 


is  doing.  If  we  keep  growing  because  of  increased 
productivity,  the  jobs  will  be  here.” 


company.  He  considers  components  part  of  the  IS 
infrastructure,  along  with  the  LANs,  WANs  and 
other  facilities  shared  companywide.  He  avoided 
recrimination  from  the  business  unit  by  allocating 
some  of  the  cost  to  the  IS  infra¬ 
structure  fund.  The  rest  was  paid 
out  of  the  business  unit’s  develop¬ 
ment  budget.  “We  have  a  fairly 
mature  outlook  on  what  we  call 
infrastructure,  and  we  budget  for  it 
separately,”  he  says. 

Van  Turnhout  brought  together 
representatives  of  the  groups  that  will 
benefit  from  the  reusability  of  a  new 
component  and  got  them  to  agree  to 
share  the  cost.  “The  enemy  is  not  the 
department  down  the  hall;  it’s  the 
competition.  And  we  have  to  focus 
on  that,”  he  says.  “I  would  much 
rather  that  we  all  share  the  cost.” 


QUESTIONS  OF 
RECENTRALIZATION 


S 


ome  observers  say  the  CIO 
who  introduces  component- 
based  technology  risks  the 
enmity  of  the  entire  user  community, 
who  may  see  it  as  a  ploy  to  return  to 
a  centralized  IS  function.  In  fact, 
CBD  does  involve  a  certain  amount 
of  standardization.  Component 
interfaces  must  be  defined  and 
adherence  enforced.  To  promote 
reusability,  components  should  be 
stored  in  a  central  library  or  reposi¬ 
tory.  Component-based  applications 
are  typically  sited  on  a  server  that 
provides  most  of  the  processing 
power.  Diskless  computers,  which 
some  see  as  one  step  up  from  dumb  terminals,  may 
be  the  chosen  desktop  technology.  To  some,  it  all 


standardization  and 
centralized  control, 
a  return  to  a  com¬ 
pletely  centralized  IS 
function  is  unlikely. 


WHO  PAYS? 

Typically,  the  first  component-based  proj¬ 
ect  costs  more  than  it  would  if  reusability 
were  not  a  design  factor.  Aggregating  esti¬ 
mates  from  several  consultants  and  practitioners, 
it  seems  reasonable  to  add  at  least  25  percent  to  the 
budget  for  the  first  project  to  cover  the  expense  of 
building  reusable  components.  If  the  project  is 
charged  back  to  one  business  unit,  it’s  also  reason¬ 
able  to  expect  that  the  unit  manager  with  budget 
responsibility  will  think  it  unfair  to  have  to  pay  a 
premium  for  components  that  will  benefit  other 
departments. 

Foley  estimates  that  building  in  reusability  added 
9  percent  to  the  cost  of  the  first  CBD  project  at  his 


It  seems  reasonable  to  add 
at  least  25  percent  to  the  budget 
for  the  first  project  to  cover 
the  expense  of  building 
reusable  components. 

begins  to  sound  like  a  return  to  the  days  of  the  main¬ 
frame  in  the  glass  house,  with  the  IS  department  in 
control  once  again. 
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The  minute  a  CIO  tells  business  users  about 
component-based  technology  and  how  components 
will  be  stored  on  servers  and  delivered  on  an  as- 
needed  basis,  “what  you’ve  done  is  reposition  IS  as 
being  central  to  the  process,  and  that  is  something 
that  makes  users  very  uncomfortable,”  says 


"The  enemy  is  not  the  department 
down  the  hall;  it's  the  competition. 

And  we  have  to  focus  on  that. 

I  would  much  rather  that  we  all  share  the  cost." 

-Tom  van  Turnhout 


Kreitzberg.  “I’ve  been  in  meetings  where  the  IS  peo¬ 
ple  have  started  explaining  [component-based  tech¬ 
nology]  and  the  users  have  gotten  very  hot  under 
the  collar.  They’ve  said,  “I  see.  In  other  words, 
you’re  putting  yourself  back  in  the  center  and  mak¬ 
ing  yourself  the  boss  again.’”  That  is  an  issue  CIOs 
must  address,  Kreitzberg  warns. 

IS  can  counter  those  objections  by  “reinventing 
itself  as  a  customer-centered  service  organization,” 
Kreitzberg  says.  IS  staff  “must  acquire  the  skills  to 
understand  users’  needs  and  support  them  in  their 
business  activities  rather  than  impose  technical  solu¬ 
tions  on  them.  CIOs  should  also  make  certain  that 
the  choices  presented  to  the  user  are  couched  in 
business,  not  technical,  terms.” 

Bassett  notes  that  although  component  manage¬ 
ment  may  be  under  central  control,  “component 
development  should  always  occur  in  the  trenches.” 
He  envisions  component  developers  sitting  next  to 
business  users  for  whom  they  are  building  compo¬ 
nents.  “By  decentralizing  them,  you’re  getting  that 
interaction  between  developers  and  users  that  fos¬ 
ters  relationships  of  trust.  You  are  getting  the  feed¬ 
back  you  need  to  refine  your  systems  as  the  business 
keeps  changing,”  he  adds.  Developers  gain  valuable 
knowledge  of  the  business — 
and  the  work  lives  of  those 
who  use  the  systems  they 
develop — by  working  in  the 
functional  areas  rather  than 
associating  mainly  with  other 
developers. 

Brian  Morrow,  director  of 
CBD  at  Texas  Instruments  Inc. 
in  Plano,  Texas,  sees  many 
companies  in  which  compo¬ 
nents  are  being  deployed  on 
back-end  servers  and  made 
available  to  decentralized 
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client  processors.  Even  when  it  makes  sense  to  cen¬ 
tralize  components  that  support  the  core  activities 
of  the  business  (such  as  human  resources,  payroll 
and  financial  applications),  components  of  greatest 
interest  to  the  user  community  (such  as  input  screens 
and  reporting  facilities)  can  remain  decentralized, 
he  says. 

In  other  words,  while  organizations  may  be  shift¬ 
ing  back  from  total  decentralization,  a  return  to  a 
completely  centralized  IS  function  isn't  likely, 
according  to  Gary  Lord,  partner  responsible  for  the 
client/server  solutions  practice  at  KPMG  Peat 
Marwick  LLP  in  Palo  Alto,  Calif.  “The  reality  is 
that  IS  organizations  are  dispersed  today,  and 
they’re  never  going  back  to  the  ivory  towers  they 
once  were,”  he  says.  Many  companies  are  moving 
toward  a  more  balanced  model,  where  the  IS  orga¬ 
nization  establishes  liaisons  to  provide  guidance  to 
business-unit  developers  on  the  front  lines.  For  a 
company  using  CBD,  such  guidance  would  likely 
include  informing  business-unit  developers  of  what 
is  available  in  the  reusable-component  library. 
Citing  a  Gartner  Group  Inc.  model,  Lord  says,  “IS 
organizations  are  adopting  more  of  a  hub-and- 
spoke  or  spiral  organizational  structure.”  (For  more 
on  Gartner  Group’s  view  of  component-based 
development,  please  see  “Once  is  Not  Enough,” 
beginning  on  Page  28). 

To  some  users,  component-based 
development  sounds  like  a  return 
to  the  days  of  the  mainframe  in 
the  glass  house,  with  the  IS 
department  in  control  once  more. 

Kreitzberg  cautions  that  both  IS  and  business 
executives  must  adapt  if  organizations  wish  to  reap 
the  benefits  of  reusability.  To  take  advantage  of 
CBD,  users  will  have  to  become  more  skilled  in 
articulating  their  needs  and  understanding  what  is 
possible  and  available  in  the  component  library. 
“Users  are  going  to  have  to  accept  responsibility 
for  a  certain  level  of  technical  expertise,”  he  says. 
On  the  IS  side,  he  adds,  “there  has  to  be  an  embrace 
of  the  user-centered  design  model.  That  means 
rethinking  the  role  of  IS  so  that  [the  IS  staff]  is  sen¬ 
sitive  to  supporting  its  customers  and  believes  that 
the  success  of  IS  depends  on  the  customer  getting 
what  the  customer  wants.”  BQ 


Contributing  Editor  Miryam  Williamson  can  be 
reached  at  mwilliamson@reporters.net. 
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BttS  and 

Pieces 

Different  kinds  of  component-based  development 
still  require  the  same  technology 


BY  MIRYAM  WILLIAMSON 


TVv 

Mm  ■  helf)  a  CIO  make  a  case  for  component-based 
M  development  (CBD)  to  an  audience  devoid  of 

glassy  stares,  some  sorting  of  technical  terms  is  in  order.  Think  of 
components  as  bits  of  software  that  can  be  replicated  and,  often  with 
minor  modifications,  assembled  repeatedly  to  form  any  number  of 
applications.  The  ease  with  which  that  can  be  accomplished  depends 
on  how  much  change  is  required  from  one  application  to  another. 
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GLOSSARY 


Component- 

Speak 

The  CIO  who  understands  the  lingo 
will  easily  persuade  other  executives 
of  software  reuse  benefits 

By  Miryam  Williamson 


API 

Application  program¬ 
ming  interface.  A  specifi¬ 
cation  within  a  program 
or  component  that 
allows  other  programs 
or  components  to  acti¬ 
vate  its  functions. 

Applet 

A  small  application;  a 
module.  An  applet  can  be 
a  component  by  itself  or 
can  be  combined  with 
other  applets  to  form  a 
component. 

Application 

A  component  or  collec¬ 
tion  of  components 
that  performs  some 
useful  task. 

Application 

architecture 

The  structure  of  compo¬ 
nents  in  a  system.  An 
application’s  architecture 
is  made  up  of  its  compo¬ 
nents  and  their  relation¬ 
ships.  (Not  to  be  con¬ 
fused  with  an  enterprise’s 
architecture,  which  con¬ 
sists  of  its  hardware  and 
software  components.) 

Business  object 

An  item  of  interest  to  a 
company;  for  example, 


a  letter,  a  customer  or  an 
order.  (See  object.) 

CBD 

Component-based 

development. 

Certification 

A  process  by  which  a 
software  component  is 
tested  to  ensure  it  can  be 
trusted;  a  precondition 
for  inclusion  in  a  compo¬ 
nent  repository. 

Client 

A  component  or  appli¬ 
cation  that  issues  a 
request  for  service. 

The  component  or 
application  that  responds 
to  the  request  is  called 
a  server.  (Both  terms 
are  also  used  in  relation 
to  hardware.) 

Component 

A  software  module 
designed  to  be  used 
repeatedly  in  developing 
applications,  either  with 
or  without  modification. 
(See  module.) 

Constraint 

A  condition  or  statement 
that  must  be  maintained 
as  true;  a  requirement. 

( Continued ) 


Well-designed  components  take  the  likelihood  of 
such  necessary  revision  into  account. 

User-interface  components  as  often  as  not 
can  be  used  without  change  from  one  application 
to  another.  A  simple  example  of  that  kind  of  com¬ 
ponent  is  the  Yes/No/Cancel  dialog  box  ubi¬ 
quitous  to  graphical  user  interface  applications, 
whether  of  the  Windows,  Macintosh  or  X  Win¬ 
dows  persuasion.  Such  components  are  readily 
available  in  a  variety  of  toolkits  and  code  libraries. 
The  supervisor  who  allows  a  programmer  to  waste 
the  time  required  to  create  a  new  one  commits  an 
act  bordering  on  managerial  malfeasance. 

Other  components,  again  most  often  found  in 
the  user  interface  layer  of  an  application,  require 
minor  modification  from  one  application  to  the 
next.  One  such  component,  the  drop-down  list, 
does  not  vary  in  its  basic  appearance  and  under¬ 
lying  mechanism  between  applications  but  typi¬ 
cally  requires  the  programmer  to  key  in  the  new 


4^ 


Business 
components 
f  are  more 

likely 

than  other  components  to  be 
developed  in-house. 


list  of  available  menu  choices  each  time  it  is  reused. 
Since  those  easily  modified  components  are  wide¬ 
ly  available  and  have  proven  functionality,  it’s  dif¬ 
ficult  to  think  of  reasons  to  create  new  ones. 

Application  components,  such  as  the  programs, 
that  go  into  an  office  application  suite,  also  can  be 
thought  of  as  parts  to  be  assembled.  For  instance,  a 
word-processor,  a  spreadsheet  and  an  e-mail  pro¬ 
gram  can  be  embedded  in  a  larger  business  appli¬ 
cation.  Consider,  for  example,  an  insurance  com¬ 
pany’s  claims-processing  system.  It  might  bring 
together  an  imaging  application  that  displays  a 
handwritten  diagram  of  an  automobile  accident, 
a  forms-based  application  that  contains  the  origi¬ 
nal  claim  data,  a  word-processing  application  on 
which  the  claims  clerk  drafts  a  letter  to  the  cus¬ 
tomer  asking  for  additional  information  and  an  e- 
mail  application  with  which  the  clerk  forwards  the 
claim  file  to  a  supervisor  for  action.  Some  of  those 
components  may  have  been  purchased  while  oth¬ 
ers  may  have  been  developed  in-house,  but  if  they 
are  part  of  a  suite,  they  are  linked  in  look  and  feel 
to  a  menu  by  a  uniform  user  interface  (which  is  al- 
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Ardes  2k  is  the  only  proven 
millennium  solution. 


2000  Skyline  Tower  •  10900  N.E.  4th  Street 
Bellevue,  Washington  98004 


The  deadlines  for  Year  2000  compliance  cannot  be 
missed.  This  innovative  product  gives  your  technology 
specialists  the  knowledge  and  resources  they  need  to 
understand,  and  fix,  your  millennium  problems. 


Ardes  2k  was  developed  as  the  successful  result  of  Data 
Dimensions'  5  years  practical  experience  with  creating 
solutions  for  the  millennium  problem.  It  integrates  proven 
strategies,  processes,  and  tools  based  on  experience  evaluating 
and  updating  over  3  billion  lines  of  code  for  hundreds  of 
organizations,  including  over  30  Fortune  500  companies. 

It  allows  your  organization  to  develop  trained  millennium 
experts  quickly  and  easily,  with  quality  support  from  a 
worldwide  leader. 


Customizable,  Scaleable,  Tools-Neutral  Technology 

Ardes  2k  incorporates  a  tools-neutral  process  bound 
only  by  the  best  automation  software  available.  The  key  is 
a  unique  Modular  Repeatable  Process  (MRP)  that  can  be 
customized  for  individual  environments,  dynamically  scaled 
to  any  size  organization,  and  configured  to  measure  any 
quantifiable  results.  As  a  result,  your  cost  and  training  time 
is  effectively  minimized,  while  your  enterprise's  productivity 
and  efficiency  is  significantly  increased. 


Innovative  Automated  Technology  Transfer 

Data  Dimensions'  unique  technological  process  lets  you 
easily  transfer  Ardes  2k  knowledge  to  your  information 
systems  personnel  and  effectively  implement  solutions.  By 
utilizing  CD  and  Internet  technology,  Ardes  2k  Year  2000 
solutions  are  now  available  to  a  worldwide  client  base. 


Comprehensive  Enterprise-wide  Solutions 

Ardes  2k  is  the  most  comprehensive  millennium  update 
package  available.  The  easy-to-use  format  provides  technical 
information  that  can  be  optimized  for  your  enterprise 
environment  via  CD-ROM,  Internet  Web  site  access, 
complementary  support  tools,  products  and  services. 


Get  Started  Now 

Ardes  2k  is  the  only  proven  solution  that  can  help 
your  organization  meet  the  complex  challenge  of  21st 
century  compliance. 

To  order  Ardes  2k,  call  Data  Dimensions  at 
800-499-1979  or  visit  our  Web  site  at 
http://www.data-dimensions.com. 
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With  Prosoft,  companies  implementing  Intranet  solutions  take  advantage  of  the 
most  comprehensive  hands-on,  instructor-led  training  available  anywhere. 
These  courses  are  delivered  at  state-of-the-art,  T- 1  enabled  training  locations  throughout  the  USA. 

Prosoft  training  supports  all  major  Internet  technology  platforms  with  a  uniformly  high 
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standard  of  propnetary  courseware  and  instructional  excellence.  And  as  importantly,  Prosoft  is 

ready  with  training  almost  as  fast  as  these  weights  are  lifted  to  victory. 
For  further  information,  course  descriptions,  locations  and  class  schedules, 
call  I  -888  PROSOFT  (776-7638)  or  visit  us  at  www.prosoft.org. 
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The  World's  Internet/Intranet  Training  Company 


Broker  Architecture. 

A  messaging  standard 
that  enables  object- 
oriented  systems  to 
interoperate. 

Encapsulation 

The  isolation  of  a  com¬ 
ponent’s  attributes  and 
behaviors  from  sur¬ 
rounding  structures.  The 
technique  protects  com¬ 
ponents  from  outside 
interference  and  protects 
other  components  from 
relying  on  information 
that  may  change  over 
time.  Components  are 
often  encapsulated. 

Event-driven 

programming 

The  technique  of  creating 
applications  in  which  the 
order  of  actions  is  deter¬ 
mined  by  the  end  user 
or  an  external  event  as 
opposed  to  the  program¬ 
mer.  The  opposite  of 
procedure-oriented 
programming. 

Inheritance 

The  mechanism  for  shar¬ 
ing  behaviors  and 
attributes  among  objects. 
Behaviors  and  attributes 
defined  at  a  higher  (more 
abstract)  level  can  be 
accessed  or  redefined  at 
a  lower  (more  concrete) 
level.  Some  components 
are  capable  of  inheri¬ 
tance. 


Iterative 

development 

An  approach  to  applica¬ 
tion  development  in 
which  prototypes  are 
continually  refined  into 


increasingly  complete 
and  correct  systems. 

(See  prototyping.) 

Module 

A  unit  of  software 
code  designed  for  use 
with  other  modules;  a 
component.  (See  applet.) 

Object 

A  software  module 
containing  a  collection 
of  related  data  and 
procedures  for  operating 
on  that  data.  (See 
business  object.) 

Object  orientation 

An  application  develop¬ 
ment  and  database  tech¬ 
nology  based  on  defining 
abstractions  of  real- 
world  entities  known  as 
objects,  such  as  invoices, 
orders  and  customers, 
which  contain  both 
data  and  procedures.  Key 
characteristics  of  object- 
oriented  systems  are 
encapsulation,  inheri¬ 
tance  and  polymorphism. 

Polymorphism 

The  ability  of  objects  to 
handle  different  types  of 
information  and  different 
requests  for  actions. 
Components  are  not 
typically  polymorphic. 

Procedure-oriented 

programming 

The  traditional  approach 
to  application  develop¬ 
ment,  in  which  the 
sequence  of  actions  is 
determined  by  the 
programmer  rather  than 
the  end  user  or  another 
application.  The  opposite 
of  event-driven  program¬ 
ming. 

(Continued) 


so  made  of  reusable  components). 

Business  components  are  more  likely  than 
other  components  to  be  developed  in-house, 
where  standards  that  make  reusability  possible  are 
easier  to  establish.  Those  components  embody 
proprietary  business  rules  such  as  how  to  deter¬ 
mine  how  much  credit  to  extend  to  a  new  cus¬ 
tomer,  when  to  apply  interest  charges  to  late  pay¬ 
ments  and  how  to  calculate  interest. 

THE  TECHNOLOGY  OF  CBD 

One  of  the  two  key  requirements  of  compo¬ 
nent-based  development  is  an  open  inter¬ 
face  that  allows  components  to  communi¬ 
cate.  Components  that  work  together  must  know 
quite  a  bit  about  each  other:  how  each  works,  what 
data  each  needs,  what  formats  the  data  uses,  what 
commands  each  component  knows  and  how  each 


While  souped-up  repositories 
are  coming  in  the  near  future, 
most  development  shops  have  at 
least  one  application  modeling  tool 

that  might 
be  pressed 
jfp^  into 

immediate 
service. 


will  respond  to  them.  That  kind  of  compatibility 
requires  an  agreement  among  vendors.  At  this  writ¬ 
ing,  a  consortium  of  vendors  including  Hewlett- 
Packard  Co.,  Microsoft  Corp.,  Oracle  Corp.  and 
Texas  Instruments  Inc.  is  scheduled  to  submit  a  pro¬ 
posal  that  specifies  the  description  of  component 
interfaces  to  the  Object  Management  Group,  an 
industry  organization  in  Framingham,  Mass. 
Acceptance  by  the  OMG  is  anticipated  by  the  sec¬ 
ond  quarter  of  1997. 

The  second  requirement  of  component-based 
development  is  a  component  repository,  a  place  to 
store  information  about  a  company’s  components, 
that  also  links  to  the  components  themselves  (see 
“Once  Is  Not  Enough,”  Page  28).  While  souped- 
up  repositories  are  coming  in  the  near  future,  most 
development  shops  now  have  at  least  one  applica¬ 
tion  modeling  tool  (which  used  to  be  called  a  com¬ 
puter-aided  software  engineering,  or  CASE,  tool) 
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SYSTEM  SOFTWARE  ASSOCIATES,  INC. 


Distributed  Objects 

for  the  Enterprise 
BPCS  Client/Server 


SSA 


Now  you  can  bring  the  power  of  distributed  object  technology  to  your  entire  industrial  sector 
enterprise.  BPCS  Client/Server"4  utilizes  SSA's  Distributed  Object  Computing  Architecture 
(DOCAc)  to  provide  your  organization  the  technical  benefits  of  distributed  object  technology 
in  your  enterprise  environment. 

This  proven  object  technology  underlies  BPCS  Client/Server-  the  most  robust  and 
powerful  application  functionality  available  for  industrial  sector  enterprise-wide  systems. 

Now  you  can  effectively  integrate  supply  chain  management,  multi-mode  manufacturing, 
electronic  commerce,  Internet,  and  global  configurable  financial  applications  in  a  distributed 


environment  across  your  total  enterprise. 

SSA's  DOCA  is  CORBA  conformant,  ensuring  that  SSA's  software  operates  in  compliance  with 
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SSA  Inc.  500  West  Madison 
Chicago,  Illinois  60661  USA 
Telephone:  1 -800-SSA-BPCS,  x  27 
FAX:  312/474-7500 
http://www.ssax.com 


the  Object  Management 
Group's  standards. 
Interoperability  with  other 
CORBA  conformant  object 
applications  is  assured.  The 
flexibility  and  configurability  of 
a  message  based  architecture  is 
inherent  in  BPCS  Client/Server. 

SSA's  distributed  object  tool 
set-  Object  Development 
Workbench  (ODW)-  builds 
robust,  state-of-the-art 
Client/Server  applications. 

BPCS  Client/Server  includes 
drag  and  drop,  embedded 
objects,  and  other  third 
generation  client/server  user 
interface  functions. 

SSA  is  the  world's  largest 
object  technology  company, 
with  53  full  service  offices 
worldwide,  and  industry 
leading  technology. 

Shouldn't  we  be  talking? 

DISTRIBUTED  OBJECT 
COMPUTING  ARCHITECTURE 
FOR  THE  TOTAL  ENTERPRISE 

©  1997  System  Software  Associates,  Inc. 

BPCS  is  a  trademark  of  SSA. 


reuse 


:  Prototyping 

allows  it  to  be  used  in 

The  development  of  a 

more  than  the  application 

model  that  displays  the 

for  which  it  was  created, 

appearance  and  behavior 

with  or  without  modi- 

(look  and  feel)  of  an 
application  to  be  built. 

fication. 

A  prototype  may  only 

Spiral  lifecycle 

demonstrate  the  applica- 

Another  term  used  to 

tion’s  appearance.  It  may 

describe  the  iterative 

also  demonstrate  naviga- 

development  process. 

tion  and  user  controls,  or 

Opposite  of  waterfall 

it  may  even  accept  input 
data  that  can  be  stored  in 

life  cycle. 

and  retrieved  from  a  sim- 

Waterfall  life  cycle 

ulated  database.  (See  also 

The  conventional  soft- 

iterative  development.) 

ware  development 
process,  consisting  of 

Repository 

a  series  of  steps  common- 

A  database  of  information 

ly  defined  as  analysis, 

about  objects  and  compo- 

design,  construction, 

nents.  Synonyms  include 

testing  and  implementa- 

library  and  encyclopedia. 

tion.  The  underlying 
assumption  is  that  each 

Reusability 

phase  does  not  begin 

The  characteristic 

until  the  preceding  phase 

of  a  component  that 

is  complete. 

Gauging  Results 

Knowing  what  to  measure  is  as  important 

as  knowing  what  metrics  to  use 

Functionality: 

Suitability: 

number  of  inputs,  queries, 

number  of  change 

outputs,  views  of  data 
and  interfaces  to  external 

requests  after  delivery 

systems,  rated  according 
to  complexity 

Errors: 

per  n  lines  of  code 
(excluding  blanks  and 

Duration: 

in  calendar  weeks  or 
months 

comments) 

Time  to  Fix: 

average  turnaround 

Effort: 

time  from  bug  report  to 

in  workweeks,  months  or 

delivery  of  fixed  code 

years 

Reuse  Ratio: 

Usability: 

lines  of  code  reused 

number  and  frequency 
of  help-desk  calls  after 
delivery 

per  total  lines  of  code 

equipped  with  a  repository  that  might  be  used  to 
handle  component  descriptions.  Even  a  rudimen¬ 
tary  repository  that  can  do  little  more  than  report 
on  the  component’s  name,  its  physical  location  on 
the  server,  its  purpose,  data  types  and  the  instruc¬ 
tions  it  can  understand  is  an  acceptable  starting 
place.  Software  configuration-management  tools — 
often  present  on  a  shelf  if  not  in  use  at  most  IS  orga¬ 
nizations — can  usually  manage  the  same  kind  of 
information.  Insiders  say  Microsoft  will  release  a 
dedicated  component  repository  at  about  the  time 
the  Object  Management  Group  approves  the  stan¬ 
dard  component  definition.  That  repository  will  be 
applicable  only  to  Microsoft  environments,  but 
other  platform-independent  applications  are  in  the 
pipeline. 


Corporations 
using 

intranets  f 
now  have 
a  head  start  on 

providing  developers  with  enter¬ 
prisewide  access  to  a  repository. 


Corporations  using  intranets  now  have  a  head 
start  on  providing  developers  with  enterprisewide 
access  to  a  repository.  Application  developers  will 
be  able  to  log  onto  a  Web  server,  search  for  a  com¬ 
ponent  by  typing  part  of  a  key  word  and  retrieve 
a  list  of  relevant  components,  including  each 
item’s  description  and  documentation.  The 
intranet’s  graphical  capabilities  will  make  it  pos¬ 
sible  for  the  programmer  not  only  to  read  about 
the  component  but  also  to  see  it — particularly  in 
the  case  of  a  user-interface  element.  Then,  with  a 
simple  mouse  click,  the  desired  component  can 
be  downloaded  from  the  server  to  the  developer’s 
client  machine  to  be  incorporated  in  the  new 
application. 

Of  course,  repositories  do  not  build  themselves. 
Developers  must  be  encouraged  to  build  compo¬ 
nents  to  populate  the  repository,  and  most  organi¬ 
zations  will  need  to  designate  a  repository  manag¬ 
er  or  librarian.  There  may  already  be  such  a  person 
in  charge  of  Cobol  libraries.  Both  the  person  and 
the  Cobol  modules  may  be  integrated  into  the  com¬ 
ponent  repository  effort.  QE1 


Contributing  Editor  Miryam  Williamson  can  be 
reached  at  mwilliamson@reporters.net. 
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LBMS  Process  Engineer®  -  Best  Practices  for  the  Enterprise 


Sustainable  Process  Improvement.  That’s  what  its  all  about  according  to  industry  experts  such  as  Capers  Jones,  the 
Gartner  Group,  the  Meta  Group  and  the  SEI —  the  people  who  make  their  living  figuring  out  how  to  make  better,  faster,  cheaper 
a  reality.  And  these  experts  point  to  Process  Management,  enabling  you  to  achieve:  350%  increase  in  developer 
productivity;  70%  improvement  in  project  schedules;  90%  reduction  in  defects;  and  500%  return  on  investment. 


With  over  1 ,000  implementations  worldwide,  Process  Engineer  is  the  leading  Process  Management  tool  for  defining, 
deploying,  executing  and  improving  development  best  practices.  The  LBMS  Process  Library  ’'  combines  our 
knowledge  base  of  best  practices  with  that  of  industry  experts  through  our  LBMS  ProcessWare  Partners 
Program.  We  address  significant  development  issues  such  as:  Enterprise  Client/Server  Applications,  Data 
Warehousing,  Business  Process  Re-engineering,  Package  Implementation,  and  Object  Oriented 
Development.  Process  Engineer  enables  the  process  library  to  be  customized  to  reflect  organizational  best  practices. 
Its  integrated  suite  of  tools  provides  authoring,  process-driven  planning,  task  and  deliverable  management,  process 
improvement  capabilities  to  all  team  members  and  provides  facilities  for  publishing  best  practices  on  a  corporate  Intranet. 


Break  through  the  Barrier  Today.  Call  us  now  to  schedule  a  Process  Engineer  Demo.  Register  online  at  our  Web 
site  for  the  LBMS  Lree  Seminar  Series:  Process  Management.  Order  a  Lree  White  Paper  on 
Process  Management  or  our  multimedia  Seminar  On  CD  Call  us  at  1-800-345-LBMS  MM  LmLj/lr/^y 
(5267)  or  outside  the  US  at  7 13-625-9300.  Visit  us  on  the  Web  at  www.lbms.com. 


http://www.lbms.com 


©  1996  LBMS,  Inc.  Process  Engineer  is  a  trademark  of  LBMS,  Inc.  All  other  trademarks  acknowledged. 
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TECHNOLOGIES  YOU'LL  NEVER  OUTGROW 


You  can  continue  patching  solutions  together,  but  why? 

The  MK  Group's  integrated  technologies  support  your  discrete  manufacturing 
operation  with  an  ERP  system  that  works  together  so  your  whole  company  can 
too. 

As  part  of  Computer  Associates  International,  Inc.,  the  MK  Group  offers  you 
the  opportunity  to  get  ahead  and  stay  ahead  of  the  technology  curve.  Put 
the  power  of  next  generation  technologies  into  your  business  today  for 
greater  agility  and  business  results  now  and  in  the  future. 

From  sales  and  marketing,  engineering  and  configuration,  right 
through  project  management,  manufacturing,  delivery,  service 
warranty  tracking,  financial  management,  logistics  and 

reporting,  The  MK  Group  provides  the  Manufacturing  Manufacturing  Knowledge 
Knowledge  solution  to  qrow  your  business.  _  -iwm 

•:;t  i\/l^ 

Plug  into  the  MK  Group.  It's  the  integrated  approach . *|W 

to  technologies  you'll  never  outgrow.  . W 

&nnQ/in&A&A  group 

OUU“  /LrU  —  OOOO  /An  independent  business  unit  of 

Computer  Assocaiates  International,  Inc. 

^  p  .  I  j  ^  ^  ^  kQtOlip  CO  |%1  MK  Group  and  MK  Group  logo  are  trademarks  o!  Computer  Associates  International.  Inc. 
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INTERVIEW:  BILL  HANCOCK 


Bill  Hancock:  “A  lot  of  things 
CIOs  think  give  them  security 
actually  don’t.  ” 


...sometimes  you  need  to  hire  one.  Security 
veteran  Bill  Hancock  helps  CIOs  safeguard 
company  secrets  by  finding  loopholes  in 
networks ,  firewalls  and  building  security. 

BY  JENNIFER  BRESNAH AN 

CIOs  MIGHT  GET  A  LITTLE  NERVOUS 

when  Bill  Hancock  shows  up  for  a  visit.  Hancock,  a  25- 
year  network  and  system  security  veteran,  is  paid  to 
find  what  the  CIO  is  missing — failed  passwords,  lax 
security  guards,  even  improperly  latched  windows — 
anything  that  constitutes  a  security  lapse.  He  steals 
hardware  and  infiltrates  systems  whenever  possible, 
leaving  stuffed  Garfield  cats  in  his  wake  to  show  where 
he  could  have  planted  a  bomb  or  logged  onto  the  net¬ 
work  without  authorization. 

Hancock’s  profession  may  be  unusual,  but  clients  of 
the  New  York-based  consultancy  Network- 1  Software 
and  Technology  Inc.,  where  he  is  executive  vice  president 
and  CTO,  are  grateful  to  have  him  prowling  on  their 
behalf.  Even  a  careful  company  likely  will  overlook 
something — there’s  just  too  much  to  track,  what  with 
hackers,  new  technologies  and  an  increasing  number  of 
telecommuters.  And  there’s  more  to  security  than  just 
preventing  network  break-ins  and  information  theft. 
Companies  can  also  be  slapped  with  fines  (and  senior 
executives  can  get  jail  time)  if  they  unwittingly  run  afoul 
of  laws  designed  to  safeguard  intellectual  property  and 
protect  other  organizations  from  security  breaches. 

Staff  Writer  Jennifer  Bresnahan  recently  spoke  with 
Hancock,  an  author  of  more  than  24  books  on  net¬ 
work  security,  about  what  CIOs  need  to  know  to  stay 
out  of  trouble. 


http://www.cio.com 
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INTERVIEW:  BILL  HANCOCK 


CIO:  Do  most  CIOs  have  a  false  sense  of  se¬ 
curity  when  it  comes  to,  well,  security  ? 

Hancock:  A  lot  of  the  things  CIOs  think 
give  them  security  actually  don’t.  They  may 
have  purchased  the  right  software  and 
hardware,  but  users  turn  the  stuff  off.  For 
example,  in  most  operating  systems  like  NT 
and  VMS,  there’s  what’s  called  a  C2  certifi¬ 
cation,  which  requires  dual  passwords.  [To 
earn  C2  certification,  vendors  must  incor¬ 
porate  certain  security  facilities,  such  as 
access  control  lists,  into  their  products.]  Sounds 
great,  but  to  be  C2  compliant,  you  have  to  have 
that  second  password  enabled.  The  problem  is,  if 
you  turn  on  the  second  password  you  can’t  run 
certain  programs.  So  people  turn  it  off,  which 
weakens  security  dramatically.  It’s  like  the  seat 
belts  in  a  car:  Theoretically  they  make  a  car  safer, 
but  they  only  work  if  people  actually  use  them. 

CIO:  Typically,  how  big  are  the  security  holes  in 
companies  that  think  they’re  covered ? 

Hancock:  Well,  last  year  we  did  a  security  study 
on  a  very  large  bank  in  New  York.  This  is  what 


On  the  Safe  Side 

Tips  to  keep  your  company’s 
systems  out  of  barm’s  way: 

■  UNDERSTAND  THE  STRATEGIC  security  require¬ 
ments  for  your  company.  What  is  important  and 
what  are  the  risks?  What  would  prevent  the 
company  from  doing  business? 

■  KNOW  WHICH  ASSETS  you're  trying  to  protect. 

■  UNDERSTAND  THE  LEGAL  RAMIFICATIONS 
of  security  decisions  you  make. 

■  ESTABLISH  A  WAY  TO  ENFORCE  policies  and  proce¬ 
dures  to  let  employees  know  you  mean  business. 

■  RUN  BACKGROUND  AND  REFERENCE  CHECKS 
on  the  people  charged  with  implementing  your 
security  to  make  sure  they  are  trustworthy. 

■  UNDERSTAND  CONTRACTUAL  OBLIGATIONS  and 
nondisclosure  agreements  with  any  vendors  or 
customers.  Where  are  your  liabilities  and  what 
are  your  safeguards? 

■  SAVE  ONLYTHE  E-MAIL  AND  OTHER  documenta¬ 
tion  that  you  need  and  destroy  the  rest. 


we  call  an  active,  “friendly”  penetration 
study,  or  an  “ethical  break-in”  effort.  We 
do  not  break  into  anything  without  permis¬ 
sion  in  writing  from  the  customer.  The  day 
before  we  were  supposed  to  do  this,  I  went 
down  there,  looked  around  for  10  minutes 
and  saw  that  their  security  badges  were  just 
a  white  background  with  a  picture,  name 
and  the  company  logo  in  blue  across  the 
top.  Very  simple.  I  used  my  portable  com¬ 
puter  and  Avery  LabelPro  to  create  a  badge 
that  looked  identical.  I  got  their  logo  off 
their  Web  site  and  just  pasted  it  in.  A  piece  of 
black  tape  across  the  back  looked  like  one  of 
those  magnetic  strips.  Whenever  I  had  to  use  my 
card  to  get  in  somewhere  I  just  said  it  didn’t  work, 
and  somebody  was  always  nice  enough  to  let  me 
in.  I  made  it  all  the  way  down  to  the  computer 
room.  When  I  got  there  I  told  the  people  there  was 
a  security  test  going  on  and  they  left.  I  locked  the 
doors  and  nobody  could  get  in. 

Another  of  my  favorite  stunts  is  showing  com¬ 
panies  the  risk  of  having  network  connections 
for  employee  presentations  in  public  places  like 
the  cafeteria.  Now,  common  sense  says  if  you 
have  public  network  connections,  you  should 
disable  them  until  you  need  them.  Well,  many 
people  don’t  do  that.  So  I  plug  in  my  laptop  in 
the  cafeteria,  use  a  standard  protocol  analyzer 
and  manage  to  snag  all  the  system  manager’s 
password  software  because  I’ve  got  a  filter  writ¬ 
ten  to  do  exactly  that.  Thirty  minutes  later  I  have 
the  system  manager’s  password  and  I’m  able  to 
log  into  anything. 

CIO:  How  big  a  problem  are  these  types  of  inter¬ 
nal  breaches  for  companies ?  And  how  can  CIOs 
avoid  them ? 

Hancock:  In  1991  the  FBI  released  a  report  that 
showed  that  80  percent  of  all  computer  break-ins 
were  inside  jobs.  A  lot  of  people  think  encryption 
is  a  catch-all  for  security.  Boy,  is  that  wrong,  be¬ 
cause  internal  hackers  have  the  encryption  keys. 
Encryption  means  you’ve  got  a  tunnel  between 
yourself  and  the  remote  site.  But  it  doesn’t  prevent 
someone  from  doing  whatever  they  want  once 
they  get  in.  Security  via  encryption  is  not  enough. 
There  has  to  be  something  else  that  says,  “Bill  has 
the  right  key  but  he’s  still  not  allowed  to  get  into 
certain  areas.”  The  CIO  needs  to  make  strategic 
decisions  that  some  things  should  never,  ever  be 
accessible  from  the  outside,  no  matter  who’s 
logging  in. 

CIO:  Most  Cl  Os  are  aware  that  telecommuting  in¬ 
volves  serious  security  risks.  But  is  there  anything 
about  protecting  an  extended  network  that  even 
security-conscious  CIOs  might  not  know ? 


Eighty 
percent  of 
all  computer 
break-ins 
are  inside 
jobs. 
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y  Heavy  -handed  service  providers  may  have  been  acceptable  in  the  days  of  heavy  iron.  But  today  ’s  distributed  environment 
calls  for  a  more  flexible,  customer-centric  approach.  The  kind  of  personal  service  you  get  from  the  distributed  computing 

A 

professionals  at  Vanstar.  ^  Vanstar  s  IT  services  support  each  phase  of  the  PC  life  cycle  with  consideration  for  your  unique 
environment.  Our  thousands  of  technical  professionals  are  trained  to  team  with  your  staff  to  deliver  the  services  required 
to  support  your  evolving  computing  infrastructure.  We  develop  custom  solutions  for  design,  acquisition,  deployment,  sup¬ 
port  and  technological  migration  —  all  focused  on  helping  you  cut  costs,  reduce 
risks  and  increase  productivity.  \  Put  a  world  of  IT  experience  at  your  service. 

Call  Vanstar  at  1-800-99*1-23*15  or  visit  our  web  site  at  www. vanstar.com.  WWW.vanstar.com 
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INTERVIEW:  BILL  HANCOCK 


Hancock:  The  newest  risk  is  the  expanded 
security  parameter.  [Tele-Communications 
Inc.]  offers  its  @Home  service  for  commer¬ 
cial  use  in  Fremont,  Calif.,  and  Hartford, 

Conn.  If  you  live  in  these  places  you  can 
connect  to  the  cable  TV  network  as  an 
Ethernet  node  from  your  home.  With  that 
you  bring  up  TCP/IP  and  boom,  out  you  go 
It’s  a  high-speed  connection  that’s  just  like 
your  Ethernet  in  the  office.  The  catch  is 
you’re  now  on  a  public,  not  a  private,  Ether 
net.  Anybody  else  out  there  with  the  right 
software  can  see  what  you’re  doing.  If  the  CIO 
doesn’t  do  something  about  securing  that  home 
system — and  I’m  not  just  talking  about  encryp¬ 
tion,  I  mean  a  firewall  or  something  along  those 
lines — then  all  of  a  sudden  people  can  attack  the 
network  through  the  home  system. 

CIO:  What  do  CIOs  need  to  know  about  the  laws 
governing  security  f 

Hancock:  CIOs  should  realize  that  the  very  laws 
designed  to  ensure  security  can  wind  up  costing 
them  money  and,  in  some  cases,  result  in  misde¬ 
meanor  and  felony  charges.  For  example,  there 
are  laws  on  the  books  banning  the  export  of 
chemical,  biological,  encryption  or  other  technol¬ 
ogy  to  certain  countries  or  individuals  on  a  re¬ 
stricted  expert  list.  Some  of  these  people  are  U.S. 
citizens  who,  for  whatever  reason,  the  Depart¬ 
ment  of  Commerce  or  Department  of  Defense  has 
deemed  untrustworthy.  But  most  companies 
wouldn’t  think  twice  about  shipping  something  to 
a  U.S.  address  or  sending  e-mail.  Not  realizing 
that  the  list  exists — and  most  companies  don’t — 
can  lead  to  problems  down  the  road. 

CIO:  What  were  these  laws  designed  to  prevent 
or  protect ? 

Hancock:  The  U.S.  government  views  encryption 
as  a  national  security  asset.  If  we  were  to  put  en¬ 
cryption  in  a  product  and  our  enemies  like  Iraq 
were  to  get  a  hold  of  it,  the  U.S.  government 
would  have  a  heck  of  a  time  finding  out  what  they 
were  up  to.  The  problem  is,  export  controls  touch 
our  friends  as  well  as  our  enemies. 

CIO:  Do  you  know  of  companies  that  have  been 
tripped  up  by  this  law ? 

Hancock:  One  of  our  customers  is  a  very  large 
pharmaceutical  company  that  was  recently  pur¬ 
chased  by  a  German  company.  Like  most  phar¬ 
maceuticals,  our  client  had  developed  a  very  large 
database  of  all  its  compounds,  chemicals  and 
product  formulas.  It  turns  out  the  German  com¬ 
pany  and  its  scientists  weren’t  allowed  to  view  the 


database,  even  though  they  bought  the 
company  and  all  its  assets,  because  of  ex¬ 
port  restrictions  on  technology  and  bio¬ 
chemistry.  The  CIO  had  no  knowledge  of 
this.  So  we  went  over  to  a  law  library  and 
pulled  up  the  information,  and  there  it  was 
in  black  and  white.  Without  an  export 
license,  his  company  would’ve  been  fined  at 
least  $50,000  per  occurrence,  or  five  times 
the  actual  value  of  the  product. 

In  a  now-famous  incident,  a  computer 
vendor  was  fined  over  $8  million  in  1991  for 
disclosing  restricted  processor  technology  to  coun¬ 
tries  banned  by  the  Department  of  Commerce.  In 
fact,  the  incident  was  that  a  data  sheet  and  detailed 
technical  specifications  on  a  new  processor  were 
sent  out  in  a  worldwide  e-mail  notice  to  the  ven¬ 
dor’s  offices  and  third-party  customers.  The  ven¬ 
dor  didn’t  have  an  export  license,  so  he  was  found 
guilty,  fined  and  warned  that  further  violations 
could  result  in  the  shutting  down  of  all  interna¬ 
tional  telecommunications  links.  If  this  had  hap¬ 
pened,  the  vendor  would’ve  had  to  file  Chapter  1 1 
bankruptcy  within  30  days  due  to  the  amount  of 
overseas  business  the  vendor  conducts. 

CIO:  Does  doing  business  internationally  bring  up 
any  unique  security  risks ? 

Hancock:  When  moving  data  internationally,  a 
lot  of  additional  laws  kick  in.  The  United  King¬ 
dom  is  a  good  example.  Their  copyright  law, 
passed  in  the  1 989  Data  Security  Act,  says  that  if 
one  of  your  employees  is  caught  running  an  unli¬ 
censed  version  of  software — let’s  say  she  installed 
a  Microsoft  Works  CD  on  her  machine  without 
having  a  license  for  it — then  you,  her  manager, 
could  be  fined  up  to  £5,000  [just  over  $8,000). 
And  you  might  even  be  subject  to  five  years  in  jail. 

CIO:  So  how  can  CIOs  help  their  companies 
handle  the  myriad  risks ? 

Hancock:  It  is  no  different  than  the  effort  in¬ 
volved  for  an  accountant  to  keep  up  with  tax  law. 
It’s  not  just  going  to  happen.  What  most  people 
don’t  realize  is  that  computer  security  is  a  body 
count  problem  and  requires  technical  expertise  in 
both  security  and  law.  CIOs  should  think  about 
having  a  security  audit  by  certified  security  profes¬ 
sionals  like  the  people  at  the  Information  Systems 
Audit  and  Control  Association.  They  should  also 
look  at  retaining  a  high-tech  law  firm. 

If  a  company  outsources  security,  the  vendor  bet¬ 
ter  be  doing  these  things;  the  CIO  better  make  sure 
it’s  in  the  contract,  rara 
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Who  has  the  broadest  installed 
base  of  open-system  imaging  and 
workflow  software  in  the  world? 


* 


“Plexus” 


“Plexus” 


“Plexus” 


“Imaging  and  workflow  are 
too  important  for  my  business 
to  trust  anything  less” 

From  financial  services  to  insurance,  from  government  to 
telecommunications,  more  industries  around  the  globe  rely  on 
Plexus®  software. 

What  makes  our  tools  and  solutions  so  popular?  Our  customers 
will  tell  you,  it’s  our  industrial-strength  approach  to  imaging  and 
workflow  applications.  Our  time-tested  products  provide  the  bullet¬ 
proof  performance  that  Fortune  1 000  organizations  demand  for 
business-critical  transactions. 

We've  been  pioneering  workflow  and  imaging  technology  for 
more  than  a  decade.  Our  broad  experience  with  industries  in  over 
40  countries  gives  us  a  unique  understanding  of  diversified  busi¬ 
ness  requirements.  So  we  can  help  you  put  our  solutions  to  work 
even  more  effectively. 


Whether  you’re  looking  for  tools  like  our  Plexus  FloWare® 
product  line,  for  automated  workflow  procedures;  or  the  powerful 
document  imaging  functionality  of  our  XDP®  products;  or  our  Health 
Care  line  of  turnkey  solutions — Plexus  gives  you  the  same  relia¬ 
bility  for  the  first  or  millionth  transaction  of  the  day.  For  complete 
solutions,  you  can  depend  on  our  sales,  support,  and  services,  and/or 
the  expertise  of  our  OEMs,  VARs,  and  systems  integrators. 

It’s  no  wonder  Plexus  is  the  answer  to  so  many  people’s 
business-critical  needs.  We’re  looking  forward  to  addressing 
yours.  For  more  information  about  our  family  of  products  and 
solutions,  call  or  e-mail  today. 

Tel:  1-800-999-5910  or  408-747-1210 
E-mail:  info@plx.com 
Web:  www.plx.com 

plexus 

Division  Of  BancTec 


©1996  BancTec.  Inc  All  rights  reserved  BancTec.  Plexus,  FloWare.  and  XDP  are  registered  trademarks 
of  BancTec  in  the  United  States  and  other  countries. 
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For  years,  Denver-based  telephone 
company  US  West  Communications  in¬ 
structed  its  6,000  customer  service  repre¬ 
sentatives  to  tell  customers  that  installation 
of  any  new  service  would  take  approxi¬ 
mately  48  hours.  Eventually,  with  the  rise  in  multi- 
line  residential  installations  and  the  boom  in  con¬ 
struction  throughout  the  company’s  service  area, 
representatives  found  it  difficult  to  determine  just 
when  new  services  could  be  completed.  The  stan¬ 
dard  answer  just  didn’t  cut  it  anymore. 

The  frustrating  reality  was  that  the  informa¬ 
tion  for  accurate  time  estimates  for  customer  ser¬ 
vice  did  exist — the  operators  just  couldn’t  get  to 
it,  according  to  David  Laube,  vice  president  and 
CIO  at  US  West.  Laube’s  solution?  Build  a  Web- 
based  front  end  for  the  customer  service  desk.  “With  the 
customer  on  the  phone,  the  representative  can  now  have 
the  application  launch  a  search  engine,  find  the  infor¬ 
mation  and  drop  it  back  on  the  operator’s  desk  in  real¬ 
time,”  he  explains. 

Browser  technology  was  crucial  to  the  project’s  suc¬ 
cess,  Laube  says,  because  it  allowed  the  company  to  build 
and  deploy  in  eight  weeks  an  application  that  had  elud¬ 
ed  its  developers  for  10  years.  By 
putting  that  information  on  the  ser¬ 
vice  representatives’  desktops,  they 
could  give  customers  an  accurate 
time  commitment  for  service. 

Part  of  the  payoff  came  by  way  of 
more  satisfied  customers  and  happi¬ 
er  shareholders.  In  addition,  “that 
application  alone  saved  us  $10  mil¬ 
lion  in  the  first  year,”  says  Laube. 
Applications  that  divide  process- 
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Are  Web-based  applications 
“ client! server  done  right”? 

BY  CURTIS  F.  FRANKLIN  JR. 


ing  requirements  between  server  and  workstation  aren’t 
new,  but  the  rapid  development  and  deployment  of  the 
World  Wide  Web  and  its  essential  client  software,  the  Web 
browser,  are  leading  many  organizations  to  experiment 
with  the  technology  for  all  types  of  applications.  In  fact, 
some  are  beginning  to  question  whether  applications  based 
on  browser  technology  are  the  ultimate  expression  of  the 
client/server  model.  Somewhere  between  the  hype  of  the 
Web  and  the  caution  of  technology  traditionalists  lies  an 
intriguing  approach  to  faster,  lower-cost  development. 

Why  the  Rush  to  the  Web? 

It  started  in  1984  when  Apple  Computer  Inc.’s  Macintosh 
introduced  the  concept  of  a  GUI  to  the  mainstream  com¬ 
puting  world.  GUI  designs  for  MS-DOS,  Unix  and  other 
platforms  followed,  and  the  platform  wars  were  on. 
Corporate  IT  executives  have  found  themselves  caught  in 
the  crossfire  ever  since,  forced  to  mediate  between  fans  of 
one  GUI  or  another.  As  if  that  weren’t  enough,  many  IT 


Emerging 


Technology 


THE  STATE  OF  THE  ART, 
NEW  PRODUCTS 
AND  S  TAY  1  N  G  AHEAD 
OF  THE  CURVE 

Edited  by  Elaine  M.  Cummings 


Beyond 

Client/Server 


74  CIO  /  MARCH  1 ,  1997 


http://www.cio.com 


.LUSTRATION  BY  JIM  SCHERER 


DECISIONS  ARE  TOUGHER. 

TIME  IS  CRITICAL. 

RESOURCES  ARE  LEANER. 

AND  THE  BUCK  STOPS  WITH  YOU. 


Introducing 

CFO  Vision 

THE  POWER  TO 


...HYPE  JUST  WONT  CUT  IT  ANYMORE. 


FIGURE  IT  OUT 


919.677.8200  Fax  919.677.4444  In  Canada  1.800.363.8397  www.sas.com/vision/ 


Stop  crunching  and  start  analyzing.  With 
CFO  Vision  you  can  visualize  your  business 
interactively... and  gain  control  of  informa¬ 
tion  to  spot  opportunities  and  risks  faster 
than  ever  before.  Reengineer  the  entire 
process  of  financial  consolidation,  reporting, 
and  analysis... as  you  accelerate  the  flow 
of  information  to  decision  makers  at  every 
level  of  your  organization. 

With  the  click  of  a  mouse: 

■  Understand  the  facts  beyond  the  figures. 

■  Improve  timeliness  and  availability  of 
business  reporting. 

■  Analyze  every  "slice"  of  your  business — 
from  branch  profitability  to  product  cost 
analysis — in  any  currency. 

Powerful,  award-winning  data  warehousing, 
OLAP,  graphics,  and  EIS  capabilities  are  all 
included  in  one  fully  integrated,  easy-to-use 
solution.  It’s  all  yours  from  one  vendor: 

SAS  Institute,  with  a  proven  track  record 
for  continuous  innovation  and  reliable 
support  at  more  than  29,000  organizations 
worldwide. .  .including  the  Fortune  100. 

For  a  free  preview  of  CFO  Vision,  just 
give  us  a  call  or  send  us  E-mail  at 
cio@sas.sas.com 


SAS  is  a  registered  trademark,  and  CFO  Vision  a  trademark, 
of  SAS  Institute  Inc.  Copyright  ©  1996  by  SAS  Institute  Inc 
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departments  have  been  required  to  sup¬ 
port  multiple  GUIs,  enormously  compli¬ 
cating  support  and  development  issues. 
So  it’s  no  wonder  that  many  are  intrigued 
by  one  of  the  principal  claims  of  brows¬ 
er  enthusiasts:  platform  independence. 
Because  the  browser  creates  a  self-con¬ 
tained  graphical  world,  and  because  all 
browsers  for  all  platforms  understand  the 
same  set  of  instructions,  the  development 
staff  can  blithely  ignore  the  operating  sys¬ 
tem  that  exists  on  the  client  computers. 
At  least  that’s  the  theory. 

While  many  consider  Web-based 
applications  to  be  an  extension  of  the 
client/server  model,  in  one  crucial  way 
they  are  a  dramatic  departure:  Virtually 
all  business-rule  processing  occurs  on  the 
server,  not  on  the  client.  The  client  sys¬ 
tems  do  all  the  display  work,  providing 
the  GUI  that  has  become  so  necessary 
for  modern  computer  applications.  But 
the  database,  query  engines  and  busi¬ 
ness-process  servers  sit  at  the  center  of 
the  enterprise  rather  than  being  dis¬ 
tributed  to  the  desktops.  Perhaps  sur¬ 
prisingly  for  those  reared  in  the  true  reli¬ 
gion  of  client/server,  Web  enthusiasts 
view  that  thin-client  model  as  a  benefit. 

In  the  classic  client/server  model, 
developers  have  to  concern  themselves 
with  separate  pieces  of  application  soft¬ 
ware  at  the  client  and  the  server  (and 
often  at  several  points  in  between).  In  the 
Web-based  world,  however,  the  client 
displays  whatever  is  sent  to  it  over  the 
network.  To  change  what  the  user  sees, 
one  need  simply  change  the  Web  page 
file;  in  the  eyes  of  the  user,  a  new  appli¬ 
cation  is  loaded  each  time  he  or  she  logs 
in.  Developers  don’t  have  to  worry 
about  keeping  versions  of  client  and 
server  software  in  synch  or  if  a  new  ver¬ 
sion  of  the  client  software  can  actually 
communicate  with  the  server. 

As  an  additional  benefit,  new  ver¬ 
sions  of  applications  can  be  deployed 
almost  instantly  by  simply  changing  the 
information  sent  by  the  Web  server.  The 
savings  in  both  time  and  support  costs 
can  be  significant  and  creates  a  major 
driving  force  in  favor  of  Web-based 
applications. 

Software  savings  are  not  the  only  eco¬ 
nomic  factors  weighing  in  for  browsers. 
Because  practically  all  business-rule  pro- 


Smart  Money 

Convenience  and  security  are  only  the  beginning 
of  what  smart-card  technology  promises 


The  rise  of  Internet  com- 
merce  and  a  resulting  in¬ 
creased  interest  in  secure  fi¬ 
nancial  transactions  are  helping  to 
raise  the  profile  of  processor-based 
smart-card  technology. 

Comparable  in  size  to  a  conven¬ 
tional  magnetic-strip  credit  card, 
smart  cards  are  intelligent  devices  that 
feature  a  wide  range  of  transaction, 
security  and  portable  information 
storage  capabilities. 


On  the  World  Wide  Web,  smart 
cards  could  be  used  to  safeguard  con¬ 
fidential  financial  information  and 
store  digital  cash.  Hoping  to  trans¬ 
form  the  concept  into  a  reality  is 
London-based  Mondex  International 
Ltd.,  an  international  consortium 
backed,  in  part,  by  MasterCard 
International  Inc. 

Under  the  Mondex  plan,  now  being 
organized  by  Mondex  USA  in  San 
Francisco,  Net  surfers  will  be  able  to 
store  digital  cash  on  a  smart  card, 
which  can  then  be  used  to  make  inex¬ 


pensive  online  purchases  from  Web 
merchants.  Consumers  will  load  digi¬ 
tal  cash  onto  their  cards  via  their  Net- 
linked  PC  or  from  public  locations 
such  as  automated  teller  machines. 

Chris  Goeltner,  manager  of  North 
American  smart-card  chip  operations 
for  Siemens  Corp.  in  Cupertino,  Calif., 
envisions  the  day  when  every  desktop 
computer  keyboard  comes  equipped 
with  a  smart-card  reader.  “Card-read¬ 
er  technology  will  be  several  dimen¬ 
sions  more  secure  than  any  currently 
used  encryption  technology,”  he  says. 
“It  will  be  functionally  the  equivalent 
to  using  a  credit  card  in  a  store.”  Key 
Tronic  Corp.,  Alps  Electric  Co.  (of 
Japan)  and  Hewlett-Packard  Co.  are 
among  the  companies  that  are  devel¬ 
oping,  or  have  developed,  smart-card 
reader-equipped  keyboards. 

Smart  cards  are  also  set  to  play  a 
role  in  the  emerging  world  of  corpo¬ 
rate  intranets.  The  technology  can  be 
used  to  bolster  the  security  of  in- 
house  networks  based  on  Internet 
technology,  says  B.  Jeffrey  Katz,  vice 
president  of  marketing  at  Atmel,  a 
San  Jose,  Calif.,  semiconductor  man¬ 
ufacturer.  “Managers  can  issue  cards 
and  PINs  to  give  authorized  users 
intranet  access,”  he  notes.  Katz  adds 
that  smart  cards  can  incorporate  per¬ 
sonal  biometric  information  from 
retina  and  fingerprint  readers,  mak¬ 
ing  authentication  virtually  ironclad. 

Cyberspace  smart-card  applications 
will  likely  play  a  significant  role  in 
spurring  smart-card  production. 
Market  researcher  Dataquest  expects 
worldwide  shipments  to  jump  from 
156  million  units  in  1996  to  1 .2  billion 
units  in  2001.  -John  Edwards 


cessing  takes  place  on  the  server,  work¬ 
stations  may  no  longer  require  the  mas¬ 
sive  computing  power  and  storage  sys¬ 
tems  now  common  on  high-end  desktop 
systems.  Whether  corporations  and  their 
users  will,  in  fact,  be  willing  to  trade  the 
individual  power  and  flexibility  of  cur¬ 
rent  desktops  for  the  lower  cost  and 


built-in  manageability  of  a  system  built 
around  a  browser  remains  to  be  seen.  A 
growing  number  of  organizations  are 
looking  at  these  browser-based  systems, 
called  network  computers,  as  a  way  of 
reducing  the  high  support  and  imple¬ 
mentation  costs  that  have  characterized 
the  personal  computer  era. 
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DON'T  BUST  YOUR  HUMP 


Stop  risk  in  its  tracks  when  deploying  mission- 
critical  applications,  with  Automated  Soft¬ 
ware  Quality  tools  from  Mercury  Interactive. 
Because  no  other  product  suite  tests,  bench¬ 
marks  and  tunes  GUI  clients,  middleware  and 
servers  better  than  ours.  No  surprise  then, 
that  41%  of  the  software  testing  tools  in  use 
today  wear  the  Mercury  Interactive  name.* 
When  we  say  this  stuff  works,  it  works.  Call 
today  for  our  new  Risk  Management  Kit  and 
find  out  for  yourself.  1-800-TEST 911 


interactive 

Making  Client/Server  Work 
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Although  most  media  attention  is  focused  on  the  brave  new 
applications  being  created  with  Web  technology,  the  most 
exciting  news  for  many  IT  professionals  may  be  the  extended 
life  that  browsers  can  offer  to  legacy  applications  and  data. 

“There  are  three  significant  problems  facing  legacy  systems 
that  a  Web  front  end  helps  solve,”  says  US  West’s  Laube. 
“They’re  hard  to  change.  They  have  rigid  user  interfaces.  And 
they’re  hard  to  get  to,”  he  explains.  “So  we’re  replacing  the 
rigid  user  interface  of  legacy  systems  with  Web  front  ends  and 
turning  the  legacy  systems  into  data  and  business-rule  servers.” 

The  independence  of  the  client  platform  that  so  liberates 
some  Web  application  developers  can  bring  sleepless  nights  to 
others.  “You’re  never  quite  sure  of  what’s  going  to  happen  at 
the  client  end,”  says  John  Hulson,  manager  of  the  digital  lab 
at  Discovery  Communications  Inc.  “We  try  to  get  around  that 
by  putting  as  much  as  possible  on  the  server,”  he  says. 


"There  are  significant  problems  facing  legacy 
systems  that  a  Web  front  end  helps  solve." 

-David  Laube 

His  concern  centers  on  the  fact  that,  although  the  basic  com¬ 
mands  for  displaying  text  in  a  Web  page  are  standardized,  the 
commands  for  going  beyond  the  basics  are  anything  but  stan¬ 
dard.  Though  additional  features  for  Web  pages  can  increase 
the  number  of  functions  those  pages  can  carry  out,  they  also  up 
the  ante  of  requirements  on  the  browser  side.  Those  technolo¬ 
gies  include  Java  and  ActiveX,  which  create  “applets”  that  run 
on  the  client  and  thereby  shift  some  of  the  processing  load  off 
the  server;  frames,  an  HTML  technology  that  divides  a  user’s 
screen  into  multiple  active  areas  that  can  display  separate  func¬ 
tions;  and  multimedia  add-ons  for  adding  sound,  video  and 
other  media  to  the  page.  New  technology  from  Microsoft  Corp. 
promises  to  let  the  server  discern  the  capabilities  of  the  client 
and  serve  up  appropriate  pages,  but,  for  now,  designing  to  the 
“lowest  common  denominator”  of  features  is  the  safest  course. 

Continuing  to  develop  with  traditional  tools  while  explor¬ 
ing  the  possibilities  of  browser-based  technology  is  a  path  fol¬ 
lowed  by  much  of  the  industry.  Laube  has  overseen  the 
development  of  both  browser-based  and  more  traditional 
client/server  applications  over  the  last  two  years  and  antici¬ 
pates  his  organization  will  continue  to  develop  both  types  of 
applications  for  the  foreseeable  future. 

A  Question  of  Bandwidth 

Even  the  proponents  of  browser-based  technology  for  client/ 
server  applications  recognize  that  there  are  still  a  few  hurdles  to 
overcome  before  proprietary  development  tools  can  be  relegat¬ 
ed  to  the  dustbin  of  history.  While  it  might  seem  that  each  man¬ 
ager  would  have  a  unique  list  of  issues,  a  few  problems  are  com¬ 
mon  to  most  lists.  Among  them  are  slow  application  response 
times,  a  scarcity  of  production-quality  development  tools  and  a 
lack  of  security  features.  Response  time  is  especially  critical  if 


'Til  Convergence  Comes 

Automated  voice  systems  work  best  for  high- 
volume,  low-priced  consumer  products  where  profit 
margins  are  narrow.  Softbank  Services  Group's  Tel- 
Address,  a  suite  of  automated  voice  technologies,  is  designed 
to  process  any  kind  of  customer  order  directly  over  the  tele¬ 
phone.  It  is  especially  suited  to  high-volume  purchases  such 
as  entertainment  software,  product  upgrades,  maintenance 
contracts,  product  registrations  and  periodical  subscriptions. 

Customers  call  a  toll-free  number  to  activate  the  service. 
Tel-Address  searches  either  a  proprietary  prospect  database  or 
a  continuously  updated  national  address  database.  In  less  than 
a  second,  it  confirms  the  caller's  name  and  address  via  text-to- 
speech  capability.  For  customer  purchases,  the  system  can 
capture  the  order,  request  and  verify  credit  card  information, 
and  perform  an  electronic  sale  over  the  phone.  The  data  is 
then  transmitted  instantly  to  the  order-processing  system  and 
forwarded  to  a  fulfillment  center.  At  any  time  during  a  call,  a 
customer  may  choose  to  speak  with  a  person,  and  the  call  and 
customer  data  are  immediately  transferred  to  a  salesperson. 

Tel-Address's  speed  and  accuracy  come  from  integrating 
powerful  databases  and  automated  data-capture  technology 
with  Softbank's  back-end  order-processing  and  fulfillment 
infrastructure.  The  company  has  plans  to  handle  more  than 
1 2.5  million  customer  calls  within  the  United  States  in  1 997; 
its  statistics  show  that  the  new  service  method  can  cut  the 
cost  of  agent-assisted  systems  by  up  to  75  percent. 

For  more  information  about  Tel-Address,  call  716 
871-6400  or  visit  www.sbservices.com. 


Utility  Vehicle 


Members  of  your  mobile  workforce  face 
more  obstacles  than  those  safely  ensconced  in 
cubes  or  offices.  They  have  to  deal  with  inclement 
weather,  telecom  glitches  and  the  difficulty  of  finding  con¬ 
nections  from  hotel  rooms  in  the  unwired  wilderness.  From 
seats  on  planes,  trains  and  automobiles, 
they  still  have  to  make  a  difference  in 
the  company's  bottom  line.  So  their 
computers  need  to  be  more  than  just 
nodes  of  processing  power. 

Melard  Technologies  Inc.'s  Scout 
All-Terrain  Subnotebook 
provides  integrated  communi¬ 
cations  to  allow  access  to 
enterprise  systems  in  a  rugged 
shell  that  can  withstand  the  rig¬ 
ors  of  the  great  outdoors.  It's  also  com¬ 
pact  and  light  enough  to  be  taken  anywhere. 

Scout's  modular  design  features  four  PCMCIA  slots,  pro- 
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You  Can't  Survive  Without  It. 

The  Internet  Commerce  Expo. 


April  8-11, 1997  •  Atlanta,  Georgia 
September  8-11, 1997  •  Los  Angeles,  California 

The  World's  Premiere  Exposition  and  Conference  Dedicated  To 
Internet  Commerce  and  the  Intranet. 

The  Internet  Commerce  Expo  brings  innovative  solution  providers 
and  knowledgeable  buyers  together  in  a  powerful  Internet  technology 
exposition  and  conference.  It's  your  chance  to  get  in  on  the  hottest 
Internet  action  in  the  county.  Don't  miss  it! 

For  Exhibitors:  highly  qualified,  enterprise  buyers  will  be  there. 

There  will  be  thousands  of  motivated  buyers  actively  looking  for  the 
new  products  that  have  made  the  Intranet  and  Internet  commerce 
practical  and  secure.  There  is  simply  no  better  way  to  reach  this  hot- 
to-buy  audience  than  ICE.  Corporate  decision  makers  will  be  there  in 
huge  numbers  looking  for  productivity  enhancing  solutions...  and  they'll 
find  what  they're  looking  for  at  ICE. 

For  Attendees:  the  coolest  way  to  find  the  hottest  IT  solutions. 

Hundreds  of  the  leading  hardware,  software  and  network  services 
vendors  will  be  on  hand  to  show  you  how  to  increase  productivity 
and  profitability  via  the  latest  Internet  technology.  ICE  is  the  best 
and  biggest  event  in  the  country  for  getting  directly  in  touch  with  the 
providers  of  the  hottest  Internet  solutions  for  the  enterprise.  That's 
why  this  is  the  show  your  simply  cannot  afford  to  miss.  If  you  can 
attend  just  one  show  this  year,  better  make  it  ICE. 

In  addition,  the  focused  content  of  Internet  Commerce  Expo's  industry¬ 
leading  conference  program  will  address  the  needs  of  developers,  IT 
and  business  managers  and  senior  executives. 

ICE.  If  it's  hot  it's  here. 

There's  a  hard  new  truth  in  the  world  of  business  today,  and  it  goes 
like  this:  Internet  commerce  is  the  force  driving  business  into  the  next 
millennium.  So  if  you're  a  vendor  with  a  compelling  Internet  solution  for 
the  enterprise...  or  a  corporate  decision  maker  looking  for  productivity 
enhancing  products,  you  need  to  be  where  it's  hot. 


See  ICE  on  the  Web:  http://www.idg.com/ice 


INTEHNET  COMMERCE  EXPO 


INTERNET  SOLUTIONS  FOR  THE  ENTERPRISE 


miDG 

An  International  Data  Group  Company 


ICE,  the  ICE  logo,  Internet  Commerce  Expo 
and  Internet  Solutions  for  the  Enterprise,  are 
service  marks  of  International  Data  Group. 


April  8-11, 1997 

Georgia  World  Congress  Center 
Atlanta,  Georgia 

September  8-11, 1997 

Los  Angeles  Convention  Center 

Los  Angeles,  California 


Please  put  me  on  ICE!  I  would  like  more 
information  on:  O  Exhibiting  O  Attending 
O  Atlanta  O  Los  Angeles 

Name _ 


Title _ 

Company. 


Address. 


Sponsored  by: 


COHPUTERWORLD 

rtt  tHimUt  tir  *■««  liMn 

NetworkWorld 


SunWonld 


WebMaster 


City/State/Zip _ 

Phone _  Fax 


N  E  TSIA  P  E 

WORLD 


e-Mail _ 

Mail  to:  Internet  Commerce  Expo,  111  Speen  Street,  P.O.  Box  9107, 
Framingham,  MA  01701.  Or  Fax  to:  508-370-4325  Phone:  800-667-4ICE 


Emerging 

Technology 

your  organization  processes  transactions  worth  millions  of  dol¬ 
lars  per  minute.  As  director  of  operations  for  Nasdaq  Stock 
Market  Inc.  in  Washington,  John  Delta  is  responsible  for  just 
such  a  system.  While  he  oversees  the  development  of  a  number 
of  browser-based  applications,  Delta  is  blunt  about  his  view  of 
the  technology’s  performance.  “The  response  time  [for  a  brows¬ 
er  application]  is  unacceptable  for  a  true  client/server  applica¬ 
tion,”  he  says.  “People  building  Web  sites  for  client/server  appli¬ 
cations  need  to  look  at  ways  to  optimize  response  times.” 

In  general,  performance  issues  boil  down  to  problems  match¬ 
ing  the  amount  of  graphical  information  to  be  sent  to  the  client 
and  the  available  bandwidth  between  client  and  server.  Laube 
admits  that  one  reason  he  still  supports  the  development  of  some 
applications  using  traditional  client/server  tools  is  because  of  the 
crucial  requirement  for  high  performance  in  enterprise  client/ 
server  applications.  “When  you’re  running  gigantic  numbers 
of  transactions  through  the  system,  it’s  got  to  be  fast,”  he  says. 

Yet,  as  significant  as  the  issue  of  performance  is,  some  say 
it  is  not  the  most  important  consideration.  Ensuring  that  only 
authorized  users  can  conduct  transactions  is  critical  to  any 
application  built  with  so  open  a  tool  as  a  browser.  That  very 
openness  works  against  the  designer  in  building  a  secure  appli¬ 
cation,  according  to  Nasdaq’s  Delta.  Because  of  the  huge  dol¬ 
lar  volume  that  flows  through  the  Nasdaq  systems,  Delta  is 
more  concerned  with  security  issues  than  the  average  tech¬ 
nologist  might  be.  “The  trading  system  is  our  lifeblood,  and  I 
don’t  think  the  issue  of  security  has  been  worked  out  to  the 
satisfaction  of  an  organization  such  as  ours,”  Delta  says. 

The  basic  architecture  of  browsers  works  against  good  secu¬ 
rity,  says  Peter  Heller,  director  of  business  development  at  Oracle 
Corp.  in  Redwood  Shores,  Calif.  “If  you  were  going  to  take  your 
standard  applications  and  port  them  to  browsers,  the  security 
model  would  be  all  wrong,”  says  Heller.  As  one  of  the  key  diffi¬ 
culties  to  be  overcome,  he  points  to  a  focus  on  open  access  and 
an  architecture  that  is  designed  to  be  “stateless” — that  is,  an 
architecture  that  assumes  any  user  can  go  directly  to  any  file  at 
any  time  regardless  of  program  sequence.  Heller  assumes,  as  do 
most  people,  that  the  security  issues  will  eventually  be  overcome. 

A  third  major  hurdle  for  browser-based  client/server  devel¬ 
opers  is  a  shortage  of  serious,  business-focused  development 
tools.  “If  you’re  going  to  do  high-end  client/server  financial 
applications,  you’ll  have  to  write  custom  code,”  admits  Delta. 

“Just  around  the  corner”  describes  the  hopes  of  many 
observers  as  they  look  at  the  possibility  of  moving  all 
client/server  development  to  a  browser  basis.  Larry  Weber, 
vice  president  and  general  manager  of  the  Developer  Products 
Group  at  Sun  Microsystems  Inc.  in  Mountain  View,  Calif., 
anticipates  that,  within  three  years,  the  majority  of  develop¬ 
ment  in  client/server  will  have  moved  to  a  browser-based  front 
end.  “It’s  amazing  how  rapidly  people  are  moving  to  a 
browser  front  end,”  says  Weber.  “I  think  this  will  be  the  most 
rapid  change  the  industry  has  ever  seen.”  013 

Curtis  F.  Franklin  Jr.  is  director  of  Client/Server  Labs  in  At¬ 
lanta  and  a  freelance  writer.  He  can  be  reached  via  e-mail  at 
cfranklin@cslinc.com. 


viding  high  flexibility.  The  "wireless  ready"  computer  can  be 
used  for  multiple  methods  of  communications:  It  can  be 
configured  for  various  networks  and  can  also  provide  voice 
and  data  communications  over  wire-line  networks. 

Road  warriors  will  also  profit  from  the  computer's  rugged 
construction  because  it  provides  protection  against  the  "hu¬ 
man  error"  causes  of  downtime  like  sudden  shock  and  vibra¬ 
tion,  extreme  temperatures  and  liquid  spills.  Its  Field  Impact 
Control  System  is  made  up  of  a  magnesium  metal  enclosure, 
a  rubber  bumper  system,  a  floating  hard-drive  suspension 
and  shock-mounted  components  that  safeguard  your  system. 

For  more  information,  call  914  273-4488  or  visit 
www.melard.com. 

One  If  By  Land 

The  global  marketplace  demands  the  assurance 
that  communications  will  be  available  and  reliable, 
no  matter  where  you  are.  Comsat  Corp.'s.  Planet  1 
phone,  with  seamless  digital  voice,  fax,  data  and  paging 
communications,  aims  to  create  a  worldwide  network  based 
on  reliable,  proven  technology  to  give  you  simplified  com¬ 
munications  access  with  one  phone,  one  number  and  one 
bill.  The  system  is  designed  to  help  international  business 

travelers  and  cellular 
extension  users  who 
\  \  aren't  served  by 

traditional 
satellite 
networks. 

The  Planet  1 

network  works  with  cellular/wireless 
carriers,  offering  seamless  roaming  via  Comsat 
Corp.'s  land  earth  stations,  the  Inmarsat  satellite  system  and 
wireless  networks.  The  phone  is  powered  by  a  constellation 
of  four  Inmarsat-3  satellites — a  new  generation  of  more 
powerful,  higher-capacity  satellites  incorporating  spot  beam 
technology  and  2,200  channels.  With  10  times  the  power 
and  six  times  the  capacity  of  current  Inmarsat  satellites,  the 
new  generation  of  satellites  permits  lower  rates  and  the  use 
of  smaller,  cheaper  portable  phones.  Planet  1  phones 
support  essential  business  services,  including  digital  voice, 
fax,  data  and  e-mail. 

Lightweight  and  portable,  the  phone  expands  the  infor¬ 
mation  skyway,  making  information  transmission  easier  and 
cheaper  than  other  methods;  eventually,  the  system  may 
turn  into  a  wireless  network  of  public  information  that  brings 
the  power  of  communications  technologies  down  to  a  per¬ 
sonal,  voice-to-voice  level. 

For  more  information,  call  800  726-2432  or  visit 
www.comsat.com. 
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Do  the  math 


Your  responsibilities  are  adding  up  pretty  quickly.  Managing  networks.  Creating  Internet  applications.  Driving  equipment  purchases. 
Implementing  intranet  strategies.  No  one  knows  more  than  NetWorlds,,’+lnterop®  just  how  challenging  your  job  has  become. 


The  world's  most  trusted  experts 

NetWorld+Interop  is  assembling  the  world's  largest  forum  of  net¬ 
working,  Internet  and  intranet  experts  to  give  you  an  educational 
experience  unmatched  anywhere  on  the  planet. 


50  in-depth  tutorials  and  workshops 

NetWorld+Interop  is  where  enterprise  computing  meets  the 
Internet  head  on.  Our  world-renowned  instructors  will  give 
you  the  practical  know-how  you  need  to  simplify  your  job 
and  supercharge  your  future. 


3  Powerhouse  Conferences/76  sessions 

Need  to  build  killer  Internet/intranet  solutions?  Taking  your 
network  infrastructure  to  the  next  level?  Want  the  latest  on 
broadband  access  technologies?  No  other  single  source  can 
give  you  more  strategic  insight  and  sure-fire  answers. 

Plan  to  be  in  Las  Vegas.  Because  no  matter  how  you  add  it  up,  your  investment  in  NetWorld+Interop  is  sure  to  pay  off— -exponentially. 


600  top  exhibitors  6  1000s  of  products 

This  is  your  chance  to  meet  the  industry's  premier  technology 
leaders  and  test  drive  their  latest  products,  all  under  one  roof 
and  running  live  on  the  InteropNet™. 


Conference  Programs:  May  5—9,  1 997 
Technology  Exhibition:  May  6-8,  1 997 
Las  Vegas  Convention  Center 


For  program  details  visit 
www.interop.com.  Register  online  or  call 
800-944-4629  or  1-415-372-7090. 


NETWPRLDTINTEROP  97 

Where  the  enterprise  meets  the  Internet. 


0 1  996  SOFTBANK  Expos  InteropNet  is  a  trademark  and  Interop  is  a  registered  trademark  of  SOFTBANK  Expos  NetWork!  «s  a  service  mark  of  Novell  Inc.  Other  names  are  the  property  of  their  respective  holders. 


CIO  Portfolio 

PRODUCTS  AND  SERVICES  FROM  CIO  COMMUNICATIONS 

IN  FUTURE  ISSUES 

Managing  and  Rewarding  Teams 

The  politics,  planning  and  perspiration  of  managing  a  group  is  enough  to  frustrate 
any  team  player.  CIO  will  report  on  companies  that  have  managed  and  rewarded 
teams  successfully,  providing  ideas  on  how  to  best  train,  reward  and  communicate 
with  IS  and  cross-functional  working  groups. 

Outsourcing  Buyer's  Guide 

In  CIO's  first  buyer’s  guide,  you’ll  learn  all  the  necessary  steps  to  choosing  the  out¬ 
sourcer  that’s  best  for  your  organization.  And  we’ll  talk  to  the  outsourcers  them¬ 
selves  to  discover  how  they  want  to  be  evaluated. 

BUSINESS  ON  THE  INTERNET 

WebMaster  Magazine 

CIO's  sister  publication  explores  the  business-to-business  issues  of  the  Web  and 
reports  from  the  front  lines  of  Internet  business  application.  View  the  online  version 
or  subscribe  at  www.web-master.com.  For  more  information,  call  800  788-4605. 

EXECUTIVE  PROGRAMS 

Leading  the  Charge  in  Turbulent  Environments 

March  23-26,  1997  •  Sheraton  San  Diego  Hotel  &  Marina  •  San  Diego 

A  change  agent  does  more  than  decide  on  a  company’s  new  architecture.  IS  execu¬ 
tives  must  examine  the  difference  between  leading  and  managing  strategic  change. 
This  conference  will  examine  IS’s  role  in  change  leadership  and  execution. 

Contact  CIO  at  800  366-0246  or  www.cio.com/conferences. 

A  Tale  of  Two  Webs 

May  18-21,  1997  •  Doral  Golf  Resort  &  Spa  •  Miami 

To  make  the  most  of  the  Web  as  a  business  medium,  executives  must  exploit  the 
opportunities  offered  by  both  the  Internet  and  their  intranet.  Experts  and  practi¬ 
tioners  will  discuss  development  strategies  and  business  plans  to  help  participants 
optimize  internal  and  external  Web  initiatives. 

Contact  WebMaster  at  800  355-0246  or  www.cio.com/conferences. 


CIO  RESEARCH  RESULTS 


EXECUTIVE  TURNOVER  SURVEY 

Our  survey  of  more  than  500  human  resources  executives  shows  that  CIO  tenure  is  higher  than 
most  people  believe — 6.8  years.  The  survey  compares  IS  executive  tenure  with  that  of  senior 
executives  in  finance,  HR,  sales  and  manufacturing. 

PRICE:  $395  Contact:  Lisa  Kerber  at  508  935-4449  or  kerber@cio.com 

TRENDS  AND  PRACTICES  IN  MANAGING  I.T.  STANDARDS 

This  study  evaluates  management  trends,  leading  practice  usage  and  effectiveness,  and  the 
scope  and  effectiveness  of  setting  standards. 

PRICE:  $795  Contact:  Diane  Martin  at  508  935-4274  or  dmartin@cio.com 

1996  CIO  EXECUTIVE  COMPENSATION  SURVEY 

Based  on  the  responses  of  1 ,000  IS  executives,  this  survey  looks  at  compensation  as  it  relates  to 
years  of  experience,  budget,  age,  gender,  company  size  and  education. 

PRICE:  $395  Contact:  Lisa  Kerber  at  508  935-4449  or  kerber@do.com 


cio.com 

http://www.cio.com 


Web  Central 

www.cio.com/WebMaster/ 

lm_frontpage.html 

The  executive's  starting 
point  for  IS  resources 
on  the  Web 


Executive  Library 
&  Resource  Center 

www. cio. com/CIO/ 
rc_main.html 

Information  and  resources  on 
the  most  pressing  topics 
facing  IS  executives 


Government 
Resource  Center 

www. cio. com/CIO/ 
rc_govt.html 

CIO  and  WebMaster  articles  on 
government  IS  issues,  new 
research  and  a  wealth  of  links 
of  interest  to  public-sector 
IS  personnel 


Intranet  Resource  Center 

www.cio.com/WebMaster/ 

wm_irc.html 

Case  studies,  articles,  reports, 
seminars  and  links  pertaining  to 
intranet  development  and  strategy 


WebMaster's  Notebook 

www.cio.com/WebMaster/ 

wm_notebook.html 

A  rich  collection  of  online 
seminars,  notes  and  links  to  sites 
of  interest  to  Web  managers 
and  developers 


Online  Feature  Forums 

www.cio.com/forums 

■  The  Professional  Webmaster 

■  rhe  Year  2000 

■  Electronic  Commerce 
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ALK  ABOUT  a  perishable  prod¬ 
uct  line:  Cement  starts  harden¬ 
ing  the  moment  it  is  mixed  with 
water.  For  Clawson  Concrete 
Co.,  based  in  Novi,  Mich.,  that  translates 
into  a  90-minute  window  of  opportuni¬ 
ty  to  get  each  truckload  of  cement  to  a 
customer  site  and  unload  it  before  the  agi¬ 
tation  of  the  rotating  drum  breaks 
down  the  cohesive  strength  of  the 
product.  After  the  90-minute  mark, 
a  building  inspector  is  likely  to 
reject  the  load,  which  chips  away  at 
Clawson’s  profits.  To  add  insult  to 
injury,  the  driver  must  then  head 
back  to  the  plant  to  have  the  hard¬ 
ened  concrete  jackhammered  out 
of  the  truck.  With  timely  product 
delivery  at  a  premium,  Clawson 
replaced  its  outdated  two-way 
radio  delivery-truck  dispatch 
technology  with  a  cellular-based 
tracking  and  routing  system.  The 
changeover  has  yielded  hard  ben¬ 
efits,  including  improved  accu¬ 
racy  and  decreased  waste  in 
product  delivery. 

Clawson  serves  the  greater 
Detroit  area  with  seven  ready- 
mix  plants  and  a  100-truck  delivery  fleet. 
When  a  dispatcher  receives  a  new  order, 
he  must  decide  which  plant  the  delivery 
should  come  from  and  what  truck  to  put 
it  on.  Two  years  ago,  that  process  hit  a 
stumbling  block.  The  two-way  radio  sys¬ 
tem  that  transmitted  those  messages 
became  overcrowded;  in  some  cases,  a 
signal  took  20  minutes  to  arrive  at  the 
central  computer,  which  often  meant  an 
idle  20  minutes  for  a  delivery  truck  back 
at  the  Clawson  plant.  It  also  meant  the 
dispatch  system  was  receiving  inaccurate 
data  regarding  the  travel  time  to  and 
from  the  job  site.  As  a  result,  subsequent 
deliveries  to  the  same  area  would  arrive 
too  early  or  too  late,  endangering  the 
integrity  of  the  product. 

When  Pat  Nielio  arrived  at  Clawson 
as  vice  president  of  operations  in  1995, 
fixing  the  problem  became  his  responsi- 


Clawson 
Concrete's  Fleet- 
Tracking  System 


Vital  Statistics: 


parent  company,  Ed«  C  Levy  Co  SWV'CeS  *  ClaWSO"'s 

'  Pay„Tr:RedUCede"''er>'tlm-^ 

Payoff,  increased  delivery  rate  and 

customer  service 


1  product  loss 
1  accuracy;  improved 


bility.  Nielio’s  solution  start¬ 
ed  with  junking  the  radio-based  system 
in  favor  of  a  wireless  cellular  digital 
packet  data  (CDPD)  network,  managed 
by  Ameritech  Cellular  Services,  for  sig¬ 
nal  transmission. 

Today,  the  dispatch  process  is  stream¬ 
lined  by  an  Alkon  dispatch  system  that 
tracks  delivery  times  from  each  plant  to 
every  part  of  the  Detroit  area  Clawson 
serves.  To  keep  tabs  on  which  trucks  are 
available  at  a  given  moment,  drivers 
punch  a  control-box  indicator  at  each 
stage  of  a  job,  informing  the  dispatcher 
when  they  finish  loading,  leave  the  plant, 
arrive  at  a  delivery  site  and  so  on.  Job- 
status  data  signals  now  move  by  CDPD 
to  Ameritech’s  towers,  which  then  are 
transmitted  to  Clawson  headquarters  via 
an  Ethernet  land  line.  Clawson  initiated 
a  10-unit  pilot  to  test  the  system’s  capa¬ 


bilities  without  breaking  the  bank.  The 
results  were  persuasive:  One  hundred 
percent  of  the  signals  took  less  than  a 
half-second  to  get  from  the  trucks  to  the 
central  system.  The  Alkon  dispatch  sys¬ 
tem  uses  historical  data  to  continually 
learn  new  delivery  times,  says  Nielio. 
Under  the  old  system,  such  data  was  cor¬ 
rupt  because  of  transmission  delays. 

“Now  we’re  getting  accurate 
data,”  he  says. 

Halfway  into  the  project, 
Clawson  decided  to  expand 
the  system’s  capabilities  by 
installing  global  positioning 
system  (GPS)  units  in  the 
trucks.  The  GPS  allows  dis¬ 
patchers  to  pinpoint  any  truck’s 
whereabouts,  down  to  the  street 
level — a  practice  that  saves 
truckers  time  and  the  company 
money.  “If  we’re  late,  that  means 
the  contractor  has  six  guys 
twiddling  their  thumbs  at  $30 
an  hour  each,”  says  Nielio. 

Linking  the  technologies  with 
Alkon’s  central  dispatch  system 
proved  tricky  because  the  CDPD 
network  had  to  carry  both  the 
GPS  data  signals  and  the  job-sta¬ 
tus  data.  Nielio  says  opportunity’s  knock 
kept  all  the  vendors  working  together. 
“They  all  saw  this  as  an  emerging  tech¬ 
nology  and  wanted  to  be  in  the  loop,  he 
says.  Clawson  completed  the  rollout  by 
August  ’96,  about  one  year  after  plan¬ 
ning  started.  (Nielio  is  now  at  Clawson’s 
parent  company,  Edw.  C.  Levy  Co.,  in 
Detroit.) 

The  company  measures  its  produc¬ 
tivity  gains  in  cubic  yards  per  delivery 
hour — calculated  by  dividing  the  total 
yards  of  concrete  delivered  by  the  hours 
paid  for  delivery  drivers.  The  new  sys¬ 
tem  upped  Clawson’s  bottom  line  by 
two-tenths  of  a  cubic  yard  per  hour. 
While  the  delivery  cost  is  a  competitive 
secret,  Nielio  says  the  system  paid  for 
itself  in  less  than  six  months. 

-Derek  Slater 
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ISO  9000  certification  has  become  critical  for 


companies  that  want  to  retain  and  attract 
customers.  But  the  endless  process  of  docu¬ 
menting  your  procedures  can  have  you  running 


in  circles.  TeamWARE  Flow  1.1  lets  you  sit  back 
and  relax.  By  creating  a  flow  model  it  automates 
and  documents  with  ease.  It’s  also  highly 


THIS  IS  THE 
ISO  9000  PROCESS 


collaborative,  with  updates  displayed  instantly 
to  everybody.  And  it’s  intuitive,  with  a  built-in 
forms  designer  and  a  graphical  development 
environment  that  makes  designing  workflow 


AND  THIS  IS 
TEAMWARE  FLOW 


processes  all  play  and  very  little  work.  TeamWARE 
Flow  1 .1 .  The  only  way  to  get  ISO  9000  certification 
without  going  round  and  round  and  round. 


TeamWARE 


(1-800-915-9950) 

outside  US  call  1-512-434-1579 


Call  and  ask  about  our  free  evaluation  package. 


. 
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www.teamware.us.com 
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this  works  for  everybody. 


Remember  when  all  the  pieces  fit  together  right  out  of  the  box?  We  do. 


Network  solutions  from  Cabletron.  A  simpler  way  to  work. 


Today’s  enterprise  networks  are  such  a  complex  maze  of 
disparate  parts  that  it  can  be  difficult  to  keep  the  system 
running,  let  alone  stay  focused  on  the  big  picture.  Wouldn't  it 
be  great  to  have  a  flexible,  seamless  solution  that  ensures  what 
you  buy  today  works  with  what  you’ll  require  tomorrow? 

Enter  Cabletron.  We  help  you  see  the  finished  picture 
before  another  piece  goes  into  place. 

We  believe  in  compatible  migration  for  the  life  of  your 
network,  protecting  investments  even  in  the  face  of  ever- 
changing  business  demands.  Our  vision  remains  sharp 
through  the  industry’s  strongest  investment  in  R&D 
combined  with  select  technology  acquisitions  that  sensibly 
and  seamlessly  mesh  with  our  product  strategy.  Were  with 
you  from  the  desktop  to  the  data  center,  out  to  the  wide 
area/ remote  access  environment  (ISDN,  frame  relay,  ATM) 
and  across  the  full  spectrum  of  enterprise  management 
software.  And  it’s  all  backed  by  our  legendary  commitment  to 
service  and  support,  ensuring  picture-perfect  assistance— now 
and  for  the  long  run. 

So  whether  you’re  laying  out  your  company’s  strategic 
network  puzzle  or  just  piecing  together  this  year’s  bandwidth 
needs,  Cabletron  truly  does  offer  a  simpler  way  to  work. 

For  more  information  on  how  we  can  help  simplify  your 
view  of  networking,  call  603-337-0930  or  visit  us  on  the 
Web  at  www.cabletron.com. 
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Remember  when  all  the  pieces  fit  together  right  out  of  the  box?  We  do. 


Network  solutions  from  Cabletron.  A  simpler  way  to  work. 
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Enter  Cabletron.  We  help  you  see  the  finished  picture 
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We  believe  in  compatible  migration  for  the  life  of  your 
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service  and  support,  ensuring  picture-perfect  assistance— now 
and  for  the  long  run. 

So  whether  you’re  laying  out  your  company’s  strategic 
network  puzzle  or  just  piecing  together  this  year’s  bandwidth 
needs,  Cabletron  truly  does  offer  a  simpler  way  to  work. 

For  more  information  on  how  we  can  help  simplifv  your 
view  of  networking,  call  603-337-0930  or  visit  us  on  the 
Web  at  www.cabletron.com. 
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